topic Re: PA drops traffic apparently without NO REASON in General Topics

PA drops traffic apparently without NO REASON

TheRealDiz — Mon, 30 Jan 2017 15:56:12 GMT

Hi All,

I have PA 2050 with panOS version --> 7.0.9

I have two rules:

Rule 4 --> Permit for svc-casse application as (ssl, ms-updated ecc)

Rule 5 --> Cleanup for svc-casse

That's the situation check :

RULESLOG

Really really strange behavior I never seen this before.

Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Sometimes ssl is "Allow".

SSL ALLOWED WITHOUT CHANGES

I cannot understand this behavior maybe... I'm missing something stupid?

Suggestions?

Have you ever seen this issue before?!

Best Regards

Luca

TranceforLife — Mon, 30 Jan 2017 16:30:47 GMT

Was it always like that or it changed (maybe after app database update)?

TheRealDiz — Mon, 30 Jan 2017 16:36:17 GMT

Fixed ... There is URL category filtered!

When you approach logs and rules you cannot see clearly that there is an URL category applied.

By default the column is hidden ... 😞

Luca

reaper — Tue, 31 Jan 2017 14:19:05 GMT

you can leverage the log detail button to correlate logs and get a clearer view of which actions are being applied to a session

please check out this article: Getting Started: Logging

TheRealDiz — Tue, 31 Jan 2017 17:05:57 GMT

Thanks a lot.. that's my fault I know 😞

Also thank you for the article :)!

Luca