About rgrullon

MP18,   Everything is working fine now. After double checking my config, I made a basic network mistake, on the trust interface I added the 172.16.1.2 without the /24 block.  Once I added the subnet the FW  was able to identify all traffic passing thru the interface.   I guess since the interface was only able to see limited traffic it wasn't able to make an app-id identification. I noticed a great deal of drop packages with the show  counter global, and other commands. Eiher way I learned a lot with this excercise.    Thanks for taking the time and assist Guys like me.   Stay secure all! ... View more

MP18,   I just read  BPry response, however I'm able to browse the website, which is not encrypted, I open diferent links inside the website, and they load with no issues, but when I check the traffic logs it doesn't identify the traffic as "web-browsing".   What I did notice is the FW is not having issue identifying UDP traffic as DNS, or even ICMP traffic. The issue seems to be related to traffic using TCP. I get the same behavior when browsing to HTTPS sites, it shows the app-id as incomplete as well. I'm using an ESXi host, and a VM-300 with 8.1.3. I'm confused about this app-id behivor.  Do you think doing a flow basic will reveal where the issue is?   Any guidance is appreciated. ... View more

Following up with your response. This is the issue I'm having with a VM-300 firewall running on an ESXi server. I have a firewall rule allowing web-browsing, and the client can access the access sites via http, however the app-id is not properly identify in the logs as "web-browisng", it show it as "incomplete". Why would the firewall not identify the app-id if enough sessions have passed the firewall Data Plane? The HTTP site loads with no issues.   Any guidance is appreciated. ... View more