PA-3430 Oracle Session Drop

[niko.wong]

We have multiple application servers that need to go through the firewall to access different oracle database servers, but after the recent replacement of the PA-3430, one of the application servers accessing the Oracle database session is unstable, and the other application server accesses other Oracle database servers through the firewall. Successful. In case 1, the session could not be established in the early morning. By checking the firewall logs, we found that the TCP 1521 session was dropped by the firewall. After we tried to switch the traffic of the faulty primary firewall to the backup firewall, the OracleTCP session was re-established successfully. In case 2, the session was dropped again at noon Firewall Drop, after trying to restart the application service, the TCP-1521 session was successfully re-established. The period of the case is not fixed, and the interval between case 1 and case 2 is one week.
We have configured the session timeout value of the Oracle application on the firewall to be greater than 2 days. But there are still problems.
Have you encountered such a case? Is there a solution?
The pan-os I use is 10.2.4-h2.

[ozheng]

Hello Nico Wong,

If you consider the traffic to be safe, you can app-override for the traffic between the Oracle Servers.

Olivier

[niko.wong]

Hi, thanks for your answer, but I don't quite understand, my strategy is based on the Oracle application.