topic Re: Limit on data transfer (biometric punch records) from biometric device located at branches. in General Topics

Limit on data transfer (biometric punch records) from biometric device located at branches.

Vinzbe — Mon, 18 Sep 2023 12:06:19 GMT

Limit on data transfer (biometric punch records) from biometric device located at branches.
Can able to downlaod data if the punch records are less than 30 records and not able to downlaod if records more than 30.
But if we bypass Paloalto firewall we can able to downlaod even the records are more than 40k.

Re: Limit on data transfer (biometric punch records) from biometric device located at branches.

reaper — Mon, 18 Sep 2023 13:44:54 GMT

what does the traffic/threat log indicate is happening with the flow when you transfer the records?

is the session timing out, being blocked, receiving a RST/FIN, ....

some more information from the flow would be helpful to try and help you figure out what is going on

Re: Limit on data transfer (biometric punch records) from biometric device located at branches.

Vinzbe — Mon, 18 Sep 2023 14:02:40 GMT

Hi, Please find the Session end reason as aged out/rst-from-client.

Re: Limit on data transfer (biometric punch records) from biometric device located at branches.

reaper — Tue, 19 Sep 2023 08:57:24 GMT

ok that also look like very low byte counts

are source and destination always the same IP?

you could try creating a custom application with a very long lifetime, and then creating an application override rule for these sources/destinations to see if that helps

if not, you'll need to do a little troubleshooting:

debug dataplane packet-diag clear all debug dataplane packet-diag set filter match source x.x.x.x destination y.y.y.y debug dataplane packet-diag set filter match source y.y.y.y destination x.x.x.x debug dataplane packet-diag set filter on show counter global filter delta yes packet-filter yes

run that last command a few times during the transfer and see if you see any packets being dropped or error messages