cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who Me Too'd this topic

PA firewall dropping fragmented packets

L4 Transporter

Hello,

 

 

We've seen Netflow Traffic being dropped by the Palo Alto firewall based on the packet captures taken. No zone protection profile is set. DF bit is set to zero. MTU settings are fine and fragmented packets are less than 1500. However, FW is not reassembling the packets. Global counter shows: IP Fragments entry insert failure. IP Fragements entry allocate fail.
Netflow.jpg
 
 
How does one fix this issue?
 
Thanks in advance.
Who Me Too'd this topic