https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429035#M1274 <P>Hi there,</P><P>Assuming you have configured your deny/drop security policy rules to log traffic, you will see these log entries in the Monitor -&gt; Traffic tab on the webGUI.</P><P>&nbsp;</P><P>cheers,</P><P>Seb.</P> Wed, 25 Aug 2021 08:29:04 GMT SebRupik 2021-08-25T08:29:04Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429021#M1273 <P>Hi friend,</P><P>&nbsp;</P><P>I already done the security policy, but it seem there are some traffic drop. Where can i find it out for the traffic drop?</P><P>Thank you.</P> Wed, 25 Aug 2021 07:29:02 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429021#M1273 sunate_h 2021-08-25T07:29:02Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429035#M1274 <P>Hi there,</P><P>Assuming you have configured your deny/drop security policy rules to log traffic, you will see these log entries in the Monitor -&gt; Traffic tab on the webGUI.</P><P>&nbsp;</P><P>cheers,</P><P>Seb.</P> Wed, 25 Aug 2021 08:29:04 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429035#M1274 SebRupik 2021-08-25T08:29:04Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429038#M1275 Thanks,<BR /><BR />And if i want to know is there any packet drop for Traffic that i allow.<BR />Can i see it?<BR /> Wed, 25 Aug 2021 08:33:00 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429038#M1275 sunate_h 2021-08-25T08:33:00Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429045#M1276 <P>If the traffic is being permitted but not received by the client then it could be that the FW marking the flow as 'Threat'.</P><P>On the Monitor -&gt; Traffic tab, filter out the flows your are interested in, what entries do you have in the 'Session End' column?</P><P>&nbsp;</P><P>cheers,</P><P>Seb.</P> Wed, 25 Aug 2021 09:08:13 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429045#M1276 SebRupik 2021-08-25T09:08:13Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429057#M1277 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/143315">@SebRupik</a>&nbsp;is completely correct, the session end will tell you what the reason was, look out for session timeout as this can indicate that there was no reply from the destination side, but I would also do a packet capture on the ingress and egress interfaces, this can be found in monitor&gt;packet capture, I would be tempted, in the first instance, to do a capture on the receive on the ingress and a capture on the transmit stage on the egress, that way you will be able to confirm that traffic is leaving the firewall.&nbsp;</P> Wed, 25 Aug 2021 09:50:59 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/429057#M1277 laurence64 2021-08-25T09:50:59Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/430079#M1287 <P>Thank you guy.</P> Mon, 30 Aug 2021 08:02:42 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/i-want-to-know-where-to-find-the-allowed-traffic-drop-and-to/m-p/430079#M1287 sunate_h 2021-08-30T08:02:42Z