ssl decryption and policy deny

[MP18]

I have configured ssl decryption and rule is there to allow the traffic 

IT is hitting the right rule but policy says denied?

what can be reason for this?

[OtakarKlier]

Hello,

Would you also be able to post hte security policy rule that it is supposed to allow the traffic? I see its being decrypted but something is stopping it, maybe the policies are out of order? I see that the application is 'incomplete' this could be because of an out of order deny policy or routing.

Is the traffic allowed if decryption is disabled?

Just some thoughts,

[Remo · Accepted solution]

@MP18

I am almost 100% certain that this is because of a decryption error

... https://live.paloaltonetworks.com/t5/General-Topics/Action-and-Session-End-Reason-conflict-when-SSL-...

[MP18]

yes i added the screenshot of security policy rule number 24

yes traffic is allowed

what is out of order policy?

[OtakarKlier · Accepted solution]

Hello,

I was just thinking if you had a deny policy above the allow policy, doesnt look to be the case here. Check out the link that was posted, could be the issue.

Regards,

[MP18]

Many thanks Remo for replying to the post.