topic Re: PA firewall dropping fragmented packets in General Topics https://live.paloaltonetworks.com/t5/general-topics/pa-firewall-dropping-fragmented-packets/m-p/533572#M109894 <P>Check the below:<BR /><A href="https://live.paloaltonetworks.com/t5/next-generation-firewall/fragmented-sip-traffic-gets-silently-dropped/td-p/532728/page/2#" target="_blank">https://live.paloaltonetworks.com/t5/next-generation-firewall/fragmented-sip-traffic-gets-silently-dropped/td-p/532728/page/2#</A></P> Wed, 08 Mar 2023 11:21:06 GMT MykyUk 2023-03-08T11:21:06Z PA firewall dropping fragmented packets https://live.paloaltonetworks.com/t5/general-topics/pa-firewall-dropping-fragmented-packets/m-p/185672#M56776 <P>Hello,</P><P>&nbsp;</P><P>&nbsp;</P><DIV>We've seen Netflow Traffic being dropped by the Palo Alto firewall based on the packet captures taken. No zone protection profile is set. DF bit is set to zero. MTU settings are fine and fragmented packets are less than 1500. However, FW is not reassembling the packets. Global counter shows: IP Fragments entry insert failure. IP Fragements entry allocate fail.</DIV><DIV><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Netflow.jpg" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/12307iFC35526F4B474C61/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Netflow.jpg" alt="Netflow.jpg" /></span></DIV><DIV>&nbsp;</DIV><DIV>&nbsp;</DIV><DIV>How does&nbsp;one fix this issue?</DIV><DIV>&nbsp;</DIV><DIV>Thanks in advance.</DIV> Tue, 07 Nov 2017 01:02:09 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-firewall-dropping-fragmented-packets/m-p/185672#M56776 Farzana 2017-11-07T01:02:09Z Re: PA firewall dropping fragmented packets https://live.paloaltonetworks.com/t5/general-topics/pa-firewall-dropping-fragmented-packets/m-p/533572#M109894 <P>Check the below:<BR /><A href="https://live.paloaltonetworks.com/t5/next-generation-firewall/fragmented-sip-traffic-gets-silently-dropped/td-p/532728/page/2#" target="_blank">https://live.paloaltonetworks.com/t5/next-generation-firewall/fragmented-sip-traffic-gets-silently-dropped/td-p/532728/page/2#</A></P> Wed, 08 Mar 2023 11:21:06 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-firewall-dropping-fragmented-packets/m-p/533572#M109894 MykyUk 2023-03-08T11:21:06Z