Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine when NGFW bypassed

[SGopal11]

Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine when NGFW bypassed

T

[dtaneja]

Hello @SGopal11

Greetings from Palo Alto Networks!

I saw your post, and request you to confirm whether the Cloud NGFW resetting or dropping traffic (app shows incomplete) for all or for particular traffic.

Please have a look at the below document:-
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClibCAC

Regards,
Devanshu Taneja
Product specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/cloud-ngfw-help-center/ct-p/Cloud_NGFW

[SGopal11]

Three-Way Handshake is failing only when it goes through the Palo Alto NGFW however if I bypass it works fine. 

it drops traffic for all TCP traffic - Ping and traceroute are the only one works

Please refer to the diagram on my original post

[ssyed]

Hi, Can you please check the AWS route table and rulestack?

[SGopal11]

Hi Ssyed, Yes, that looks good as well - when I tweak the route table and bypass the NGFW endpoint it all works well.. But when I point it to NGFW endpoint the TCP handshakes doesnt get completed. Ping and traceroute works good. Rule Stack also has rules allowed