topic PA drop the connection for IPTV- no sound and video in General Topics

PA drop the connection for IPTV- no sound and video

MP18 — Sun, 30 Sep 2018 16:52:37 GMT

I have IPTV at home.

Rule is any app and any service bit i see that video has no pic and sound.

PA logs traffic,url and threat does not show packet drop.

then i removed all the security profiles and video and sound was working.

is there any way we can check where PA is dropping the traffic for IPTV with security profile enabled?

Mike

Re: PA drop the connection for IPTV- no sound and video

Mick_Ball — Sun, 30 Sep 2018 18:19:07 GMT

If you are just testing stuff then add a “block all” (deny) policy that comes after all of your allow policies.

the packets will no longer be dropped but they will be blocked and logged if logging is turned on.

you can get similar diagnostics fron modifying inter/intranet polices but i prefer the block all option and just enable it when needed.

Re: PA drop the connection for IPTV- no sound and video

Mick_Ball — Sun, 30 Sep 2018 18:21:26 GMT

Oh sorry, just noticed you mentioned profiles and not policies, the previous post may be of no help.

Re: PA drop the connection for IPTV- no sound and video

MP18 — Sun, 30 Sep 2018 20:05:57 GMT

yes they are security profiles not policies.

any idea where i can look for dropped traffic

Re: PA drop the connection for IPTV- no sound and video

gwesson — Mon, 01 Oct 2018 22:41:57 GMT

Try re-enabling the profiles one at a time (start with URL filtering, commit; then add antivirus, commit...). Eventually you'll enable the profile that is causing the drops, and you should be able to find it there.

While the session is active, you can also check for sessions that match your IPTV's address (show session all match source 192.0.2.1...). If you see any sessions set to Discard state, review that session (show session id 12345678) to see the reason.

Beyond Traffic, URL, and Threat there Data Filtering logs (corresponding to File Blocking profiles) and Wildfire submissions. It may be a profile that you're using that you may not expect to drop the traffic.

Re: PA drop the connection for IPTV- no sound and video

Mick_Ball — Tue, 02 Oct 2018 18:11:00 GMT

Very pleasent reading Mr Gwesson.....

Re: PA drop the connection for IPTV- no sound and video

MP18 — Sat, 06 Oct 2018 19:10:27 GMT

seems it was url filtering profile blocking url with ip addresses under category as unknown.

Many thanks for your answer