Question about moving traffic to new rule

[PA_User]

Hello Palo Alto Community,

I have a question regarding moving https traffic off a rule to another existing rule. The traffic being moved is critical to operations and cannot be disrupted. For this reason I've been asked to confirm the behaviour of this change. I don't see any issues with proceeding however would like to confirm the impact. My thoughts are the following when implementing the change:

-Established traffic sessions would continue to work based on the connection table until closed. So any traffic that was initially permitted by the first rule will continue to be allowed. Any subsequent new connections would be permitted via the other existing rule going forward.

Does this sound about right?

Thanks in advance.

[LAYER_8 · Accepted solution]

Please review our default behavior on session rematching here.

[PA_User]

Thanks for the link. Much appreciated!