topic Re: Number of session in General Topics

Number of session

sib2017 — Sun, 18 Dec 2016 03:30:11 GMT

Hi,

Palo alto suddenly stops client going internet .

resolving dns stops ( dns forwarder just giving timeout instead of the dns query result ) .

Does it mean maximum number of session has saturated?

How can we know maximum number of session reached .

Where do we begin to troubleshoot

Thanks

Re: Number of session

TranceforLife — Sun, 18 Dec 2016 15:43:02 GMT

Hello,

Don't think you have reached the max number of sessions. You can check current session count on the Dashboard>System Resources:

Who is the DNS server for the client? Do you have PA configured as DNS Proxy fro the clients? What can you see in the traffic logs on the PA? Can you post screen shot f the logs

Thx,

Myky

Re: Number of session

reaper — Sun, 18 Dec 2016 21:28:53 GMT

Your description is rather vague, has traffic stopped for all clients or just one
Can you ping upstream hosts (ISP router, 4.2.2.2,... ) From the firewall dataplane interfaces (ping source <DP IP> destination <IP>)
Is your DNS getting resolved, are any of your sessions getting rejected (show session all filter source <client IP>)

Re: Number of session

sib2017 — Wed, 28 Dec 2016 23:28:16 GMT

Hi,

Can you ping upstream hosts (ISP router, 4.2.2.2,... ) From the firewall dataplane interfaces (ping source <DP IP> destination <IP>)

pa in vwire mode ,.So how can i Choose source ip from the PA's dataplane to ping destination

Thanks

Re: Number of session

santonic — Thu, 29 Dec 2016 06:53:41 GMT

You can't in that case.

What do logs say? Does traffic stop just for 1 client or more? Check reachabilty of gateway from that client. Check reachibilty of DNS server. Check some internet address by IP. Etc.

Re: Number of session

kiwi — Thu, 29 Dec 2016 09:03:45 GMT

Hi @sib,

As already mentioned you can't specify datapane source IP to perform a ping test in vwire mode.