PA drop the connection for IPTV- no sound and video

[MP18]

I have IPTV at home.

Rule is any app and any service bit i see that video has no pic and sound.

PA logs traffic,url and threat does not show packet drop.

then i removed all the security profiles and video and sound was working.

is there any way we can check where PA is dropping the traffic for IPTV with security profile  enabled?

Mike

[Mick_Ball]

If you are just testing stuff then add a “block all” (deny)  policy that comes after all of your allow policies.

the packets will no longer be dropped but they will be blocked and logged if logging is turned on.

you can get similar diagnostics fron modifying inter/intranet polices but i prefer the block all option and just enable it when needed.

[Mick_Ball]

Oh sorry, just noticed you mentioned profiles and not policies, the previous post may be of no help.

[MP18]

yes they are security profiles not policies.

any idea where i can look for dropped traffic

[gwesson · Accepted solution]

Try re-enabling the profiles one at a time (start with URL filtering, commit; then add antivirus, commit...). Eventually you'll enable the profile that is causing the drops, and you should be able to find it there.

While the session is active, you can also check for sessions that match your IPTV's address (show session all match source 192.0.2.1...). If you see any sessions set to Discard state, review that session (show session id 12345678) to see the reason.

Beyond Traffic, URL, and Threat there Data Filtering logs (corresponding to File Blocking profiles) and Wildfire submissions. It may be a profile that you're using that you may not expect to drop the traffic.

[Mick_Ball]

Very pleasent reading Mr Gwesson.....

[MP18]

seems it was url filtering profile blocking url with ip addresses under category as unknown.

Many thanks for your answer