Resource-unavailable for http traffics

Reply
L3 Networker

Resource-unavailable for http traffics

Hi All,

 

Some of the sessions are ended with Resource-unavailable reasons. Almost all traffics in these sessions are web-browsing and some updates traffics on port-80.

 

All https-443 are working fine. this issue happened for 4 hours on last week. 

checked here for describtion: https://www.paloaltonetworks.com/documentation/61/pan-os/newfeaturesguide/networking-features/sessio...

 

Is there any way to resolve?. Please suggest

L6 Presenter

Re: Resource-unavailable for http traffics

What's the associated hadware? 

 

Do you use any cloud based services?

 

How many users behind the PA device?

L4 Transporter

Re: Resource-unavailable for http traffics

Hi Javith,

 

May I know the following to have a little background of the issue ?

 

1. What is the panOS version on the firewall ?

2. Does the issue resolve by itself or you need to restart any services (like dataplane, or reboot the firewall etc ) ?

 

You may be able to see some indicators by setting the filters and check the global counters for any resource issues (like the ones mentioned in the link you provided).

If the load on the firewall is normal and no suspicious counters are seen the I would suggest you to open a case with Technical Support as this may be a software issue which needs to be investigated.

 

Hope this helps !

 

Highlighted
L3 Networker

Re: Resource-unavailable for http traffics

Its PA-3020

May be users accessing some cloud services

concurrent session utlization was 2k only.

L3 Networker

Re: Resource-unavailable for http traffics

Its 7.0.3.

Issue resolved after the reboot.

Firewall load is normal.

 

I will open the TAC case. Thanks

L6 Presenter

Re: Resource-unavailable for http traffics

The reason why I was asking about cloud usage and and internal users, was I was thinking maybe there was a NAT resource exhaustion.  

 

If you're only set up with a single public IP and users, say, were going to O365 you might have reached a mathmatical limit to available NAT ports.  Also there's a relatively low limit on SSL interception cabiliites for the 3020.

L4 Transporter

Re: Resource-unavailable for http traffics

Hi Brandon,

 

It is less likely to be NAT exhaustion issue since other traffic like HTTPS (and other) like is working fine (which would also use source NAT). This seem to be a software issue which would require deeper analysis by the Tech support team.

 

 

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!