Session count can't break 1025

[ahcogn1]

Hi all, I am running a VM-series on aws and it has a issue with session, it's cannot break 1025. I'm new to Palo Alto so there are many term i really don't understand. Some body please tell me what is Active Session? Is it Session count on UI? Why can't it break 1025?

[JayGolf]

Hi @ahcogn1 ,

An active session refers to a network connection between a source IP address and a destination IP address that is currently active or in progress. I think what you are seeing is the total session count visible on the session browser.

[ahcogn1]

Hmm but why it can not break 1025. I have tested so many time but it could not pass 1025

[akuzhuppilly]

Hello @ahcogn1 

I would like to direct your attention to the VM series datasheet, which provides a comprehensive overview of the number of sessions the VM firewalls can support based on their capacity:

[VM Series Spec Sheet](https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resour...]

In addition, you can use the 'show session info' command from the firewall CLI to ascertain both the maximum number of sessions that can be supported as well as the number of active sessions.

Please ensure that the parameters you are monitoring to view session details are accurate.  When it comes to SNMP monitoring, below KB may find useful:

[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS]

[BPry]

@ahcogn1,

How exactly are you testing things? 1025 is suspiciously close to the 1024 sessions that are reserved for inline management sessions, which makes me wonder if you aren't just testing the management interfaces? 

You can also look at the maximums by running the following two commands and seeing what your meter and maximum values are displaying. I recall the active session limit for an unlicensed VM series being much lower than 1000, but maybe that has been bumped up and you just don't have a license active on your VM?

show session meter

show system state filter cfg.general.max-session

[WBagdan]

Check to see if the VM is licensed.  Without a license it should allow just enough for management function of 1025 sessions.