Palo Alto Hyper-V Security Policies with Hyper-V hosts

[Radcliffe_Barham]

Hi,

I have a PA-VM-HPV-10.1.0 setup with 2 hyper-v host. I've setup zones, virtual routers and the respective interfaces in L3. Testing the rules I can pings clients in  zone 'A' from clients in zone 'B'. The problem is my 'Hits' count remains at zero and no traffic logs is seen in the monitoring menu. Is there some specific config settings I am missing? I'm only seeing increases in the intrazone traffic count but not the specific security policy I created. I've enabled mac address spoofing for the virtual network adapter interfaces.

I can ping each client from the firewall interfaces.

[JayGolf]

Hi @Radcliffe_Barham ,

Can you describe the security policy rule you created? Zone A to Zone B with which app/protocol? Are you logging the session at end? Also, Please enter "show log traffic direction equal forward" into the CLI. Do you see any logs? 

[Radcliffe_Barham]

Hi Jay,

It was a basic rule; from source zone 'A' to destination zone 'B', any application, any service/category, allowed and logging at session end. I get consistent ping replies when pinging the device in 'B' from 'A' but the hit count stays at zero with no traffic logs seen.

I will try the cli command later when back on the test site.

[Radcliffe_Barham]

Checked the command. The logs are empty.