topic Re: SSL application undefined in monitor in General Topics

SSL application undefined in monitor

s_quasar — Mon, 29 May 2017 13:24:25 GMT

Hi,

I'm changing server but I assign it the same IP addresses of the other server with the same name because this is a Vmware P2V.

After migration there strange effect on this. Some sites go on other are down. If I view in monitor section "session browser" in those IPs I can view "undefined" and not "ssl". What have I to do to start alla websites together quickly?

Re: SSL application undefined in monitor

TranceforLife — Mon, 29 May 2017 14:46:29 GMT

Please can you post the session browser or traffic monitoring snip

Re: SSL application undefined in monitor

ansharma — Mon, 29 May 2017 14:59:57 GMT

Quasar,

From either the session browser or the CLI (show session all filter source x.x.x.x destination y.y.y.y) can you please ensure that the correct NAT, Security rule and egress interface is chosen. After that, we can take pcaps to see what's happening to the traffic.

Regards,

Anurag

Re: SSL application undefined in monitor

s_quasar — Mon, 29 May 2017 16:55:39 GMT

Maybe is all simple.

Is maybe necessary lunch the cli command "clear arp all"? Is there some problems with the connection of my online users with this command? Maybe with p2v there is no correct ARP and the cache duration is 1800 (30 minutes).

Re: SSL application undefined in monitor

TranceforLife — Mon, 29 May 2017 17:06:19 GMT

Would not hurt clearing arp table. But l assume you are not directly connected to the server with Palo.

It is a bit unclear what exactly is happening (one server is not accessible for different users or group of the servers)?

Re: SSL application undefined in monitor

s_quasar — Mon, 29 May 2017 17:29:25 GMT

I have websites with multiple IPs. Every IP is in HTTPS with it's IP associated. So in the Virtual machine I have changend the network card so my MAC is different. With clear arp maybe I can resolve the problem.

Re: SSL application undefined in monitor

TranceforLife — Mon, 29 May 2017 17:36:51 GMT

Do you know if you servers responding to ping? If yes, you could try to ping all the ip addresses from the PA to test the layer 3 connectivities.

Re: SSL application undefined in monitor

s_quasar — Tue, 30 May 2017 08:38:47 GMT

What I thought was right. It was enough to clear the ARP cache. This way, you do not have to wait for 1800 seconds, and the IP MAC-Address association is corrected.