topic Re: PAN VM Security Policies - in General Topics

PAN VM Security Policies -

Radcliffe_Barham — Thu, 26 Oct 2023 15:13:13 GMT

I have setup my VM on a single desktop with 4 NICS to connect to different subnets and security zones and to have different interface setups for the VM. Two other desktops have NICS with different subnet scopes. I have created a rule to test ping traffic from zone 'A' to zone 'B' as an example. You can ping from a client in zone 'A' to a client in zone 'B' but there is no Hit Count seen and no traffic logs either. I have tried recently to separate the subnets using a simple routing protocol RIP v2, on Cisco Routers but I have encountered the same problem as described above. Any hints on why my rules are not being hit would be welcome. Note though that the hit count for the intrazone and interzone default rules do increment and are the only rules that seem to work.

Re: PAN VM Security Policies -

JayGolf — Wed, 01 Nov 2023 03:36:34 GMT

Hi @Radcliffe_Barham ,

Does the security policy hit count still show 0 hits? Can you also verify you have a log setting checked on the Actions tab within the security policy?

Re: PAN VM Security Policies -

Radcliffe_Barham — Wed, 01 Nov 2023 19:54:22 GMT

Hit count still shows 0 and log settings are checked on my actions tab.

Re: PAN VM Security Policies -

BPry — Thu, 02 Nov 2023 22:10:26 GMT

@Radcliffe_Barham,

Are we talking about a licensed VM or an unlicensed one? Your behavior would be expected from an unlicensed VM

Re: PAN VM Security Policies -

Radcliffe_Barham — Thu, 02 Nov 2023 22:29:35 GMT

This is a licensed VM or to be clear a full eval VM 50. All software licenses are active.