Application : not-applicable in traffic log what does that mean ?

[zajilioss]

Application : not-applicable in traffic log what does that mean ?

[ericgearhart]

The firewall policies are analyzed left to right and top to bottom... 'not applicable' means that something to the left of the App-ID column caused the traffic to be dropped, so the firewall never got to the point of trying to fingerprint an App-ID because the source or destination or zone wouldn't allow the traffic anyway

[zajilioss]

Well if you could help me out to understand something ..

I have a firewall in layer 2 mode.the policies are their to allow DNS and traffic is coming from a Vlan.

now today suddenly my  all DNS traffic was getting denied and goes to block rule.I havent done any changes in policies.

If there was a Vlan mismatch could it cause a policy not to take affect and goes to default rule blocking all DNS traffic and in logs showing me Not-applicable.

[ericgearhart]

Um.... sure? Maybe?

I would think that you really want to make sure that all your VWire VLANs you have configured marry up one for one with the VLANs flowing through the two devices you're connecting together via VWire

[SilverTiger]

•“not-applicable”

-Session is blocked by the firewall

session time out,, ?

[mbutt]

Hi,

The below link explains the reason for application showing as not-applicable

https://live.paloaltonetworks.com/docs/DOC-1404

Hope this helps.

Thank you