TCP TimeOut caused by the PA?

[jhickey]

We have a video app that is streaming through our Palo Alto firewall on port 80. Everyone once in a while the session fails and can only be revived by hitting refresh in the browser. I am dealing with a network manager that's convinced the PAs are Resetting the session.

Before I go through the hassle of creating override policies for port 80 with higher timeouts I'd like to know if there is anything in the logs that would show that the PALOALTO Terminated the connection. The CISCO Firewalls put something in their logs (TCP Timeout). I'm hoping something similar exists.

Thanks,

Justin

[ddelcourt]

@NisterioHD I am certainly not an authority of all vendor FW platforms, but in general *most* security devices will drop aged out connections silently... 

I did a quick google search and found this KB article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUvCAK

Not a lot of detail, but it looks like the only way you can have the FW send a TCP Reset is if it triggers a Security Profile (threat) setting where this is an option... not everything yer looking for, but at least confirmation of what to expect...