Palo Alto and Cisco Wireless Controller

[ashraf1]

Dear All,

We have a Cisco Guest Wireless controller in the DMZ. A tunnel is established by the Cisco wireless controllers in the internal network to the wireless controller in the DMZ. The issue is the Guest users loose their connection intermittently and when our network admin, disables and enables the port of the wireless controller, the issue is solved.

During the issue, the logs in the wireless controller say that data path is up and control path is down. I have all the ports and applications between the Internal and DMZ  Wireless controller for testing purpose still we fix this issue.

Based on one of the discussions in the knowledge point, i did a application override for the udp port:16666 and 166667(cisco-wlc-monility and sometime . But even after doing a application override, the issue is still reoccurring.

The issues is intermittent, meaning it will work for 2 hours and then  the Guest wireless stops working. so the network admin has to disable and enable the port to make it work.

Please help.

Regards

Benny

[craymond]

It sounds to me like a Session time out issue. We had an issue with connections timing out over SSL to a particular application (client to server) on the internet. The resolutions was to change the TCP and Session timeout settings for that connection.

[armand.chollet]

Hello,

Did you found something ? Have you found a way to "kill" those UDP sessions in Palo somehow automatically ?

Many thanks,

Armand