Strata Cloud manager gateway traffic on cloudfront.net failing

[G.Varkey]

No blocks observed but US gateways are dropping the traffic going to ohio.gov were as the UK gateway it works. The logs do not show any blocks. Any ideas how to troubleshoot would be helpful. Opened a TAC case however its dragging out for 3 days now

[Brandon_Wertz]

---

@G.Varkey wrote:

No blocks observed but US gateways are dropping the traffic going to ohio.gov were as the UK gateway it works. The logs do not show any blocks. Any ideas how to troubleshoot would be helpful. Opened a TAC case however its dragging out for 3 days now

---

How do you know the gateways are dropping the traffic? 

It sounds like one potential might be an IP protection thing happening in CF against the US GW IPs?  As subscribers to the Prisma service we have no access to the virtual FWs so the only way to diagnose the potential "dropping" issue is for TAC to do analysis on the infra.

--edit--

This would be a VERY intrusive option, but you could remove your US gateways from deployment 1 at a time, then redeploy them.  This would create new IPs for the gateways in the deployed regions.  Doing so would be a very direct way to see if it's an IP issue.  This drastic of a step could potentially mean disruption of services though if your current GW IPs are used in an allow list for things like MFA or some other public service.

[G.Varkey]

Well when the user connects via the US gateways the traffic doesn't work however it works via the UK gateway. Thats the only way I can the tell something is up with the US gateway.

The intrusive option is the last resort I rather not go that route as its excessive to do that while no other traffic is impacted. It doesn't fly when you explain it to others.