logical interface packets drops

[qasim02]

Hi,

we are experiencing this issue that we are troubleshooting from a couple of days. we have done all our checks WAN and LAN side however there is a paloalto firewall between WAN routers and core switch in a Vwire mode with an any-any rule. the only problem I have noticed so far is that at the time of issue the firewall is not too responsive i.e. the gui takes ages but cpu shoes minimum usage.

another thing I noticed was incrementing logical interface dropped packets:

show interface ethernet1/4

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           79386995797798

bytes transmitted                        67887362097627

packets received                         2533039042

packets transmitted                      3904754824

receive errors                           0

packets dropped                          29286415

packets dropped by flow state check      63657

I can see them on all active interfaces.

anyone has any idea of how I go by troubleshooting this further as I am very new PAs.

Thanks in advance.

Regards,

Ali

[welly_59]

What is the issue you are trying to troubleshoot?

[OtakarKlier]

Hello,

In the GUI, make sure the policy is set to log at session end. Then check the monitor tab for the traffic and see what is getting blocked.

Regards,

[qasim02]

Hi welly,

it's slow connectivity and intermittent ping /connection drops. which lasts for 4 to 5 hours and then disappears. so extremely hard to troubleshoot.