topic PA drops traffic apparently without NO REASON in General Topics https://live.paloaltonetworks.com/t5/general-topics/pa-drops-traffic-apparently-without-no-reason/m-p/140078#M48220 <P>Hi All,</P><P>&nbsp;</P><P>I have PA 2050 with panOS version --&gt;&nbsp;<SPAN>7.0.9</SPAN></P><P>I have two rules:</P><P>Rule 4 --&gt; Permit for svc-casse application as (ssl, ms-updated ecc)</P><P>Rule 5 --&gt; Cleanup for svc-casse</P><P>&nbsp;</P><P>That's the situation check :</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RULES" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7510iC6A7528E52283C1F/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Rule_INVOLVED.JPG" alt="RULES" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">RULES</span></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="LOG" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7511i3C2EFD3DEBEBB5BE/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="LOG_DROP_Without_no_reason.JPG" alt="LOG" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">LOG</span></span></P><P>&nbsp;</P><P>Really really strange behavior I never seen this before.</P><P>Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Sometimes ssl is "Allow".</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SSL ALLOWED WITHOUT CHANGES" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7513iDB6193DFD4520CCA/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="SSL_Allow_random.JPG" alt="SSL ALLOWED WITHOUT CHANGES" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">SSL ALLOWED WITHOUT CHANGES</span></span></P><P>&nbsp;</P><P>&nbsp;</P><P>I cannot understand this behavior maybe... I'm missing something stupid?</P><P>Suggestions?</P><P>&nbsp;</P><P>Have you ever seen this issue before?!</P><P>&nbsp;</P><P>Best Regards</P><P>Luca</P><P>&nbsp;</P> Mon, 30 Jan 2017 15:55:29 GMT TheRealDiz 2017-01-30T15:55:29Z PA drops traffic apparently without NO REASON https://live.paloaltonetworks.com/t5/general-topics/pa-drops-traffic-apparently-without-no-reason/m-p/140078#M48220 <P>Hi All,</P><P>&nbsp;</P><P>I have PA 2050 with panOS version --&gt;&nbsp;<SPAN>7.0.9</SPAN></P><P>I have two rules:</P><P>Rule 4 --&gt; Permit for svc-casse application as (ssl, ms-updated ecc)</P><P>Rule 5 --&gt; Cleanup for svc-casse</P><P>&nbsp;</P><P>That's the situation check :</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RULES" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7510iC6A7528E52283C1F/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Rule_INVOLVED.JPG" alt="RULES" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">RULES</span></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="LOG" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7511i3C2EFD3DEBEBB5BE/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="LOG_DROP_Without_no_reason.JPG" alt="LOG" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">LOG</span></span></P><P>&nbsp;</P><P>Really really strange behavior I never seen this before.</P><P>Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Sometimes ssl is "Allow".</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="SSL ALLOWED WITHOUT CHANGES" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7513iDB6193DFD4520CCA/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="SSL_Allow_random.JPG" alt="SSL ALLOWED WITHOUT CHANGES" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">SSL ALLOWED WITHOUT CHANGES</span></span></P><P>&nbsp;</P><P>&nbsp;</P><P>I cannot understand this behavior maybe... I'm missing something stupid?</P><P>Suggestions?</P><P>&nbsp;</P><P>Have you ever seen this issue before?!</P><P>&nbsp;</P><P>Best Regards</P><P>Luca</P><P>&nbsp;</P> Mon, 30 Jan 2017 15:55:29 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-drops-traffic-apparently-without-no-reason/m-p/140078#M48220 TheRealDiz 2017-01-30T15:55:29Z Re: PA drops traffic apparently without NO REASON https://live.paloaltonetworks.com/t5/general-topics/pa-drops-traffic-apparently-without-no-reason/m-p/140252#M48249 <P>you can leverage the log detail button to correlate logs and get a clearer view of which actions are being applied to a session</P> <P>&nbsp;</P> <P><SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" style="width: 800px;"><SPAN class="lia-message-image-wrapper"><IMG class="lia-media-image ng-scope ng-isolate-scope" src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/7536i74CB389AB9D57FA8/image-size/large?v=1.0&amp;px=800" alt="log detail.png" title="log detail.png" border="0" /> <I class="lia-fa lia-fa-search-plus lia-media-lightbox-trigger"></I> </SPAN></SPAN></P> <P>please check out this article: <A title="Getting Started: Logging" href="https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Logging/ta-p/67638" target="_blank">Getting Started: Logging</A></P> Tue, 31 Jan 2017 14:19:58 GMT https://live.paloaltonetworks.com/t5/general-topics/pa-drops-traffic-apparently-without-no-reason/m-p/140252#M48249 reaper 2017-01-31T14:19:58Z