topic Re: Session count can't break 1025 in General Topics

Session count can't break 1025

ahcogn1 — Fri, 14 Jul 2023 02:24:13 GMT

Hi all, I am running a VM-series on aws and it has a issue with session, it's cannot break 1025. I'm new to Palo Alto so there are many term i really don't understand. Some body please tell me what is Active Session? Is it Session count on UI? Why can't it break 1025?

Re: Session count can't break 1025

JayGolf — Fri, 14 Jul 2023 06:16:30 GMT

Hi @ahcogn1 ,

An active session refers to a network connection between a source IP address and a destination IP address that is currently active or in progress. I think what you are seeing is the total session count visible on the session browser.

Re: Session count can't break 1025

ahcogn1 — Mon, 17 Jul 2023 04:46:21 GMT

Hmm but why it can not break 1025. I have tested so many time but it could not pass 1025

Re: Session count can't break 1025

akuzhuppilly — Tue, 18 Jul 2023 09:05:51 GMT

Hello @ahcogn1

I would like to direct your attention to the VM series datasheet, which provides a comprehensive overview of the number of sessions the VM firewalls can support based on their capacity:

[VM Series Spec Sheet](https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/datasheets/vm-series-spec-sheet]

In addition, you can use the 'show session info' command from the firewall CLI to ascertain both the maximum number of sessions that can be supported as well as the number of active sessions.

Please ensure that the parameters you are monitoring to view session details are accurate. When it comes to SNMP monitoring, below KB may find useful:

[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS]

Re: Session count can't break 1025

BPry — Tue, 18 Jul 2023 13:37:36 GMT

@ahcogn1,

How exactly are you testing things? 1025 is suspiciously close to the 1024 sessions that are reserved for inline management sessions, which makes me wonder if you aren't just testing the management interfaces?

You can also look at the maximums by running the following two commands and seeing what your meter and maximum values are displaying. I recall the active session limit for an unlicensed VM series being much lower than 1000, but maybe that has been bumped up and you just don't have a license active on your VM?

show session meter show system state filter cfg.general.max-session

Re: Session count can't break 1025

WBagdan — Wed, 13 Sep 2023 19:38:08 GMT

Check to see if the VM is licensed. Without a license it should allow just enough for management function of 1025 sessions.