Palo session application is undefined, traffic is dropped

[abai]

HI All,

We have PA5220, we have Pulse VPN in DMZ area, and when i try to connect vpn, i can see the sessions showing in PA, but application shows undefine,  then i can not login the vpn after timeout. I also can not ping to VPN address(DNAT address). Would you please help check? Thank.

I have attached the session picture int the attachment

Andy

[reaper]

can you share how your security rule and NAT rule are configured?

it's very likely there is a mismatch or something missing in either

[abai]

@reaper 

Thanks for your quick response , only China users can not connect the Canada VPN, other countries are working fine. That is wired.

[reaper]

china prohibits VPN connections to other countries, so maybe your connection is being blocked?