topic Re: Session ID 0 in General Topics

Session ID 0

nsrini1991 — Mon, 16 Jul 2018 04:33:42 GMT

Hi ,

When checking monitoring logs very often especially with ICMP, I come across" Session ID 0" and unable to find any information for the same using CLI . This throws error message as Session ID should start with 1. Not sure, why only WebGui displays as 0. Please assist.

admin@PA> show session id 0
0 should be between 1-2147483648

Invalid syntax.

Re: Session ID 0

BPry — Mon, 16 Jul 2018 18:44:59 GMT

@nsrini1991,

Session id '0' is used for anything that actually gets denied, because a session was never generated. Essentially the way the firewall functions you can't have a 'null' value for the session-id, so PAN chose to use '0' for anything that isn't allowed. Since the session doesn't actually get created and doesn't truthfully exist except in the logs, you can't view session id 0 via the cli like you could with other sessions.

Re: Session ID 0

Sanssj — Sun, 22 Jul 2018 19:08:04 GMT

To be precise Session ID is "0" if the FW action is "drop" for that specific traffic. In case of deny a session is created but the after checking the 5 tuples the FW deny the traffic.