Internal traffic is hitting in the isp firewall

[Javith_Ali]

Palo alto is perimeter to customer which is connected to isp firewall.

Internal subnet traffics which are not allowed in isp/ untrust interface are hitted in isp firewall.
Routing is proper. ARP is proper in isp interface( only next hop arp is there)

Implicit deny policy blocking the interzone traffic trust to untrust.

We don't have any clue how our internal private ip address communication is going to ISP firewall.

There is no allowed security policyfor reported internal ip's and routing is proper.

[TranceforLife]

Was a quite long session! Do you have UDP source/destination ports from the ISP records?

[Javith_Ali]

Hi

we only got source & dest IP, dest port no. from the ISP which is attached below in conversation.

[Javith_Ali]

It might be possible. because both networks are internally conneced thro core switch. the traffic should not come to PA firewall as it should be routed in core switch via inter-vlan routing. we are checking it.

But i could not figure out how PA firewall allowed some bytes to transfer through ISP interface.