You can find the definition for incomplete here: https://live.paloaltonetworks.com/docs/DOC-1549 As for the traffic, you can also look at the sessions to see if there are any packets from server to client. You can view this data from GUI through Monitor -> Traffic logs -> Click on the magnifying glass and look for packets sent and packets received. From cli you can do: show session all filter <interesting traffic> and show session id <id>. You can also look at the global counters to see if there are any drops. You can alos refer to these documents for troubleshooting using counters & captures: https://live.paloaltonetworks.com/docs/DOC-2542 https://live.paloaltonetworks.com/docs/DOC-2310
... View more