- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
07-13-2023 07:24 PM
Hi all, I am running a VM-series on aws and it has a issue with session, it's cannot break 1025. I'm new to Palo Alto so there are many term i really don't understand. Some body please tell me what is Active Session? Is it Session count on UI? Why can't it break 1025?
07-13-2023 11:16 PM
Hi @ahcogn1 ,
An active session refers to a network connection between a source IP address and a destination IP address that is currently active or in progress. I think what you are seeing is the total session count visible on the session browser.
07-16-2023 09:46 PM
Hmm but why it can not break 1025. I have tested so many time but it could not pass 1025
07-18-2023 02:05 AM
Hello @ahcogn1
I would like to direct your attention to the VM series datasheet, which provides a comprehensive overview of the number of sessions the VM firewalls can support based on their capacity:
[VM Series Spec Sheet](https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resour...]
In addition, you can use the 'show session info' command from the firewall CLI to ascertain both the maximum number of sessions that can be supported as well as the number of active sessions.
Please ensure that the parameters you are monitoring to view session details are accurate. When it comes to SNMP monitoring, below KB may find useful:
[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS]
07-18-2023 06:37 AM
How exactly are you testing things? 1025 is suspiciously close to the 1024 sessions that are reserved for inline management sessions, which makes me wonder if you aren't just testing the management interfaces?
You can also look at the maximums by running the following two commands and seeing what your meter and maximum values are displaying. I recall the active session limit for an unlicensed VM series being much lower than 1000, but maybe that has been bumped up and you just don't have a license active on your VM?
show session meter
show system state filter cfg.general.max-session
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!