topic Incomplete Packets after Service Applied in General Topics https://live.paloaltonetworks.com/t5/general-topics/incomplete-packets-after-service-applied/m-p/10487#M7720 <HTML><HEAD></HEAD><BODY><P>Hi There; </P><P></P><P>For some sessions like availability monitors and other systems that make connections over a port that has the "service http or service-https" applied in a policy, these will fail unless you allow any service to the host or create an application override for the specific destination.&nbsp; </P><P><BR />This is beacuse most of these availability monitors have only half-open connections over TCP or do not make a full http request and are merely testing for an open connection. </P></BODY></HTML> Thu, 17 Mar 2011 16:57:37 GMT amansour 2011-03-17T16:57:37Z Incomplete Packets after Service Applied https://live.paloaltonetworks.com/t5/general-topics/incomplete-packets-after-service-applied/m-p/10487#M7720 <HTML><HEAD></HEAD><BODY><P>Hi There; </P><P></P><P>For some sessions like availability monitors and other systems that make connections over a port that has the "service http or service-https" applied in a policy, these will fail unless you allow any service to the host or create an application override for the specific destination.&nbsp; </P><P><BR />This is beacuse most of these availability monitors have only half-open connections over TCP or do not make a full http request and are merely testing for an open connection. </P></BODY></HTML> Thu, 17 Mar 2011 16:57:37 GMT https://live.paloaltonetworks.com/t5/general-topics/incomplete-packets-after-service-applied/m-p/10487#M7720 amansour 2011-03-17T16:57:37Z Re: Incomplete Packets after Service Applied https://live.paloaltonetworks.com/t5/general-topics/incomplete-packets-after-service-applied/m-p/10488#M7721 <HTML><HEAD></HEAD><BODY><P>Answer in the question. </P></BODY></HTML> Thu, 17 Mar 2011 16:58:02 GMT https://live.paloaltonetworks.com/t5/general-topics/incomplete-packets-after-service-applied/m-p/10488#M7721 amansour 2011-03-17T16:58:02Z