ACC Behaviour

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

ACC Behaviour

L4 Transporter

Hello everyone!

 

I've got a question about the behaviour of the new ACC in 7.0 and above.

 

I can apply a global filter for the action of deny.

 

When I do this, the graphs show no data, even if I click refresh.

 

If I click 'jump to logs' with the filter still in place then I can see the logs/data in there ok. Removing all ACC filters allows the ACC graphics to populate properly.

 

Anyone else get similar behaviour is this expected? This seems a little off to me, I've tried clearing the ACC but this hasn't helped either.

 

thanks,

Ben

4 REPLIES 4

Cyber Elite
Cyber Elite

Do you mean this view?

Screenshot taken from 7.0.4 

 

blocked.PNG

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

 

 

Hi Raido,

 

No I mean like this below:

 

Screenshot_43.png

 

thanks,

Ben

blocked connections will not have a byte count or sessions created on the dataplane so that may explain why there wouldn't be a graph

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Hi Reaper,

 

I'm still a little confused as the log shows a byte count, my understanding is that the data is recieved by the management plane to record the log, so if no byte count on the dataplane.. how come there is one in the log? No session ID as none is installed.

 

thanks,

Ben

  • 2039 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!