Monitor > Logs > Traffic - App-ID 'ping' not logging from endpoints.

[jesseleiker]

Good day everyone and thank you in advance. 

Just to be sure I'm not losing my mind entirely - I thought I'd post up here and see if any veterans have any ideas.  I was troubleshooting something earlier today with a re-IP on some printers traversing the PA's up to our Data Center behind ASA's.  All was well with traversal, and the ASA's were gathering hitcounts, but the PA's were not registering any hits.  I began looking at monitoring live and also discovered 'ping' is no longer logging from end-point to (anything...server, endpoint, gateway's).  I can narrow to 'ping' or dst port '0' and see that plenty of ping action is coming through, but it appears to only be registering from "devices" that aren't endpoints.  IE: 

A ping from Desktop A to Server B does not register. 

A ping from Server B to Desktop A does not register.

A ping from Server C to Server D DOES register.

A ping from Server D to 8.8.8.8 DOES register.

I will warn you; I am only perhaps 6 months into the PA and I have been focused on data center migrations and clinical site migrations since I got this bad boy installed, so I'm just now staring my PCNSE studies and getting 'deeper' into the box on both CLI and everything else they have to offer, so perhaps I'm just missing something simple?  I have used the monitoring for endpoint pings in the past to ensure I'm passing traffic.  I don't know what happened, to be honest?   Thank you kindly for your time.  

[kiwi]

Hi @jesseleiker ,

That does seem odd ... I can't see why it shouldn't log this traffic if the traffic is indeed traversing the FW and if you have a policy rule in place that's actually logging this traffic.

Might sounds too simple but you have a policy rule in place that will log this ping traffic from your endpoints ? Any other traffic from these endpoints that is being logged correctly ?

Cheers,

-Kiwi.

Cheers,

-Kiwi.