https://live.paloaltonetworks.com/t5/general-topics/application-not-working/m-p/103671#M44644 <P>Application incomplete usually means that the 3-way TCP handshake didn't complete. &nbsp;It's possible that the service on untrust was not working properly at the time, or that their connection to the Internet was disrupted. &nbsp;</P><P>&nbsp;</P><P>You can add additional columns to your traffic log to show # of packets sent/received. &nbsp;If you see a lot of packets sent, but nothing received for those traffic flows, then that would point to one of the scenarios above. &nbsp;</P> Tue, 16 Aug 2016 23:49:41 GMT jvalentine 2016-08-16T23:49:41Z https://live.paloaltonetworks.com/t5/general-topics/application-not-working/m-p/103664#M44643 <P>I had a customer connecting to an application from trust to untrust. It was working and then suddenly stopped working.</P><P>I could see in the logs it was coming as port 443 and application -incomplete and then next day it started working with port 443 and application ssl. Any logical reason why this would happen. Running 7.0.6 PA200.</P> Tue, 16 Aug 2016 23:45:18 GMT https://live.paloaltonetworks.com/t5/general-topics/application-not-working/m-p/103664#M44643 inderjit21 2016-08-16T23:45:18Z https://live.paloaltonetworks.com/t5/general-topics/application-not-working/m-p/103671#M44644 <P>Application incomplete usually means that the 3-way TCP handshake didn't complete. &nbsp;It's possible that the service on untrust was not working properly at the time, or that their connection to the Internet was disrupted. &nbsp;</P><P>&nbsp;</P><P>You can add additional columns to your traffic log to show # of packets sent/received. &nbsp;If you see a lot of packets sent, but nothing received for those traffic flows, then that would point to one of the scenarios above. &nbsp;</P> Tue, 16 Aug 2016 23:49:41 GMT https://live.paloaltonetworks.com/t5/general-topics/application-not-working/m-p/103671#M44644 jvalentine 2016-08-16T23:49:41Z