Problem in receiving email

[jeffhooi]

Hi,

I face a problem with the smtp app. currently my PA500 do not set any deny action.

However, I facing a huge delay when receive the email through the SMTP. Sometimes, the can receive the email and need to replace the PAN to other firewall or router.

When i use other firewall/router to replace the PAN PA500, i did not face this issue.

I wonder if anyone facing this when implementing PAN.

[gsamuels]

Hello,

If you have already eliminated the possibility of a application identification issue by removing all the applications on the policy

I suspect this may be a routing issue, you should confirm the session table entries from the cli and possibly pull pcaps  from the mail server to make sure that it is sending traffic back to the PAN interface correctly.

Regards,

Gary S.

[jeffhooi]

Hi Gary,

The strange thing is the this issue do not happen to all the user, only certain user at certain time.

If this is the routing issue, think we are not receiving email at all. Correct me if im wrong.

In this enviroment, we only have 2  interface, trust and untrust, where the route are the default route to the untrust interface.

How can we do a testing on this ?

Thanks.