Question about moving traffic to new rule

PA_User — Fri, 15 Oct 2021 14:35:25 GMT

Hello Palo Alto Community,

I have a question regarding moving https traffic off a rule to another existing rule. The traffic being moved is critical to operations and cannot be disrupted. For this reason I've been asked to confirm the behaviour of this change. I don't see any issues with proceeding however would like to confirm the impact. My thoughts are the following when implementing the change:

-Established traffic sessions would continue to work based on the connection table until closed. So any traffic that was initially permitted by the first rule will continue to be allowed. Any subsequent new connections would be permitted via the other existing rule going forward.

Does this sound about right?

Thanks in advance.

Re: Question about moving traffic to new rule

LAYER_8 — Fri, 15 Oct 2021 16:28:35 GMT

Please review our default behavior on session rematching here.

Re: Question about moving traffic to new rule

PA_User — Fri, 15 Oct 2021 19:04:04 GMT

Thanks for the link. Much appreciated!

topic Re: Question about moving traffic to new rule in General Topics

Question about moving traffic to new rule

Re: Question about moving traffic to new rule

Re: Question about moving traffic to new rule