topic Re: Missing Zone Assignment in General Topics

Missing Zone Assignment

eridavis — Thu, 26 Mar 2020 12:15:34 GMT

I have an issue where traffic coming in one zone is not being forwarded to the right zone. It seems the destination zone is not being assigned right when the session is setup. It seems to be matching the predefined intrazone policy trust-trust. Has anyone seen this before? 10.46.36.11 should be part of a zone called KNAPP, but it is not assigned in the session below.

704116 undecided ACTIVE FORW 172.16.4.28[6516]/VPN/1 (0.0.0.0[0])
vsys1 10.46.36.11[48385]/ (0.0.0.0[0])
4191163 undecided ACTIVE FORW 10.40.42.61[53030]/VPN/1 (0.0.0.0[0])
vsys1 10.46.36.11[87]/ (0.0.0.0[0])

Re: Missing Zone Assignment

OtakarKlier — Thu, 26 Mar 2020 14:43:12 GMT

Hello,

Are the interfaces in the proper zone? What do the log say with regards to the traffic and zone. What about the virtual router? Any routes there that could be causing this?

Regards,

Re: Missing Zone Assignment

eridavis — Thu, 26 Mar 2020 21:46:10 GMT

Zones were right, but it seems the issue was a couple of things. First, the security policy that matched the application failed to match the service connection so it discarded it. The second part was a pbf that caused it to route a different path.