HTTP Response traffic

[viri4to]

Hi guys, I have been seeing that when making an http connection that goes through the PA firewall, the request is logged, but the return message is not, that is, when in panorama I filter the traffic by source ip I see the http request but I do not see the response from the server. I mean,  I don't see any log with source ip = server destination ip = client is this normal?

[PavelK · Accepted solution]

Thank you for the post @viri4to

What you described is expected. The session was initiated from client and not from server. If you want to get information whether there was response from server for HTTP traffic, you can go to Traffic Log, then add "Bytes Sent" and "Bytes Received", you can also add: "URL Category" for more visibility. If there is response from web server, then you will see count in: "Bytes Received":

By clicking on magnifying glass on very left side of log, you can get detailed log. Under section: Details you can see Received Packets and Bytes.

Kind Regards

Pavel