topic Re: PANOS10 Security Policy Not Matching Randomly in General Topics

PANOS10 Security Policy Not Matching Randomly

jdigangi — Fri, 02 Oct 2020 14:31:54 GMT

Running a PA220 with PANOS 10.0.1 Simple NAT/Security policy in place to permit an outside application access on X port. Traffic flows as expected, although randomly traffic goes unmatched and is dropped by the FW. Jiggling the handle by remapping the port from 80 back to 2075 with commits corrects the issue. TAC has reviewed the configuration and agrees all is proper, has anyone else seen this ?

I did not observe this condition in 9.x

Re: PANOS10 Security Policy Not Matching Randomly

BPry — Fri, 02 Oct 2020 15:27:01 GMT

@jdigangi,

PAN-OS 10.0 is very early in its release cycle and you're going to run into bugs. It sounds like you've come across one and have already reported it to TAC, so they've hopefully gathered logs and have attempted to reproduce the issue so they can create a bug report. Can't say that I've seen this issue throughout our testing of PAN-OS 10 personally.

Re: PANOS10 Security Policy Not Matching Randomly

jdigangi — Fri, 02 Oct 2020 16:00:13 GMT

I believe it is a bug also, I just requested my case to be re-opened again. Its a challenge to leave it broken and get free time to work with TAC, anything other than a support bundle typically needed to open a bug? I have also noticed the traffic isn't showing up in the GUI logs only the CLI logs.

Re: PANOS10 Security Policy Not Matching Randomly

MP18 — Sat, 03 Oct 2020 17:49:26 GMT

I am also running 10.0.1 so far no issues like this.

I am testing this on PA 820.