PA drops traffic apparently without NO REASON

[TheRealDiz]

Hi All,

I have PA 2050 with panOS version --> 7.0.9

I have two rules:

Rule 4 --> Permit for svc-casse application as (ssl, ms-updated ecc)

Rule 5 --> Cleanup for svc-casse

That's the situation check :

RULESLOG

Really really strange behavior I never seen this before.

Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Sometimes ssl is "Allow".

SSL ALLOWED WITHOUT CHANGES

I cannot understand this behavior maybe... I'm missing something stupid?

Suggestions?

Have you ever seen this issue before?!

Best Regards

Luca

[reaper]

you can leverage the log detail button to correlate logs and get a clearer view of which actions are being applied to a session

please check out this article: Getting Started: Logging