topic Re: Problems with PAN in General Topics

Problems with PAN

usvi — Sun, 28 Aug 2011 22:47:30 GMT

We are a PAN partner and have some issues with the boxes . We have a PA 500 installed for testing as we are looking to do some live demo for clients . I have a laptop connected to the lab running logme in, skype . The unit has been on live traffic for about 4 hrs and it can't detect neither the Skype nor the logme in . incomplete or insufficient data everywhere . The User-id no longer reports logged in users . The show user pan-agent statistics command shows it is still connected . The box is running 4.04 with the latest threat subs.

Can you imagine if we were doing a live demo infront of leads . Total let down .

Re: Problems with PAN

mderksen — Mon, 29 Aug 2011 09:00:23 GMT

Sounds like you have to take a look at the traffic flow. Incomplete or insufficient data mostly means that you only see one part of the traffic. Can it be that you have two routes in and out of the network?

Marcel

Re: Problems with PAN

usvi — Mon, 29 Aug 2011 12:22:54 GMT

Marcel,

No . The box is configured as L3 firewall . Port 3 is untrusted and port 4 is trusted . Those are the two active ports on the box . The funny thing is , when you go to the monitor tab and click on session it identifies the apps there . However,that info is not being passed to the ACC and doesn't show up n the dashboard .