About bit_byte

Hi Team .. We have enable ssl decryption then we could not able to download big file.  Downloading starts and after some time it automatically in reach to pause state. We disable SSL decryption then we could able to download file.  Firewall side we did not receive any drop packet but global counter we have received the below the counter.    admin@PA-EBTTIKAR-1(active)> show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 1.165 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_outstanding 13550 11630 info packet pktproc Outstanding packet to be transmitted pkt_alloc 18419 15810 info packet resource Packets allocated session_freed 20 17 info session resource Sessions freed flow_np_pkt_xmt 11323 9719 info flow offload Packets transmitted to offload processor flow_fwd_mtu_exceeded 4196 3601 info flow forward Packets lengths exceeded MTU flow_ipfrag_frag 8394 7205 info flow ipfrag IP fragments transmitted log_traffic_cnt 18 15 info log system Number of traffic logs proxy_sessions 4294967295 3686667206 info proxy pktproc Current number of proxy sessions proxy_sessions_forward 4294967295 3686667206 info proxy pktproc Current number of SSL-Forward decrypted session ======= admin@PA-EBTTIKAR-1(active)> show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 1.410 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_outstanding 15139 10736 info packet pktproc Outstanding packet to be transmitted pkt_alloc 20608 14615 info packet resource Packets allocated session_freed 21 14 info session resource Sessions freed flow_np_pkt_xmt 12644 8967 info flow offload Packets transmitted to offload processor flow_fwd_mtu_exceeded 4709 3339 info flow forward Packets lengths exceeded MTU ha_session_teardown_msg_sent 20 14 info ha pktproc HA: session teardown messages sent ha_session_update_msg_sent 341 241 info ha pktproc HA: session update messages sent log_traffic_cnt 21 14 info log system Number of traffic logs proxy_sessions 4294967295 3046076095 info proxy pktproc Current number of proxy sessions proxy_sessions_forward 4294967295 3046076095 info proxy pktproc Current number of SSL-Forward decrypted sessions ===== from global counter. I can see that proxy_sessions  rate and value are always.4294967295 3046076095   from packet capture we can able to see zero-window and it is from firewall.    PAN_OS 9.1.7 and 3220 .   Could you please advice  how to resolve this issue or firewall is having heavy load due to SSL decryption      ... View more

The GlobalProtect data file, located on the  Device tab > Dynamic Updates  contains the OPSWAT file. We could not able to download it.  We have scheduled download but still it is not working and other content update is working fine.   Please find below logs: > less mp-log avdata.log Mon Dec 13 07:30:03 +02 2020 : query string serialNumber=1604760636&apiKey=&featureName=globalprotect&currentGPVersion=0&currentOSVersion=10.0.2 Mon Dec 13 07:30:03 +02 2020 : data center answer <?xml version="1.0" encoding="utf-8"?> <GlobalProtect xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.paloaltonetworks.com/">   <result>The software version is no longer eligible for updates</result>   <file_version />   <lastModified>0001-01-01T00:00:00</lastModified>   <file_location />   <encryption_key /> </GlobalProtect> @BPry @kadak   ... View more

network flow  Lan Network -->Firewall A----->switch -->-Firewall B ---->Internet-------->Database server  We are facing issue to connect database server from our lan network. We took packet capture on Firewall A and firewall B . When we initiate traffic from LAN network to database server: Firewall B ; We are getting client Hello and server hello message on Firewall B Firewall A: Only client hello message we got means server hello message drop by firewall A  that why we could not able to connect with database server. We are not using any decryption and proxy we have checked counter value also we did not get any drop. traffic monitor logs session end reason: TCP-rst by client @  MP18 @   Vsys_remo @ Reaper             ... View more