PA drops traffic apparently without NO REASON

[TheRealDiz]

Hi All,

I have PA 2050 with panOS version --> 7.0.9

I have two rules:

Rule 4 --> Permit for svc-casse application as (ssl, ms-updated ecc)

Rule 5 --> Cleanup for svc-casse

That's the situation check :

RULESLOG

Really really strange behavior I never seen this before.

Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Sometimes ssl is "Allow".

SSL ALLOWED WITHOUT CHANGES

I cannot understand this behavior maybe... I'm missing something stupid?

Suggestions?

Have you ever seen this issue before?!

Best Regards

Luca

[TranceforLife]

Was it always like that or it changed (maybe after app database update)? 

[TheRealDiz · Accepted solution]

Fixed ... There is URL category filtered!

When you approach logs and rules you cannot see clearly that there is an URL category applied.

By default the column is hidden ... 😞

BR

Luca

[reaper · Accepted solution]

you can leverage the log detail button to correlate logs and get a clearer view of which actions are being applied to a session

please check out this article: Getting Started: Logging

[TheRealDiz]

Hi @reaper,

Thanks a lot.. that's my fault I know 😞

Also thank you for the article :)!

BR

Luca