Session Count is stuck and not going higher

[oktay.nabili]

Hello,

I've set up a vm firewall for testing purposes. This firewall will be used in lab environments where users will scan lab machines.

However, I am encountering an issue where the session count never exceeds 1025, even though the scanning machine attempts to create over 10,000 sessions per second. After a while, all connections to the lab environment are dropped. To my knowledge, we don't have any threat prevention or similar rules in place that could be causing this.

On our physical firewall (pa-445), similar scans cause the session usage percentage to increase significantly, as expected. We would like to achieve the same behavior with the PA-VM.

Thanks in advance.

VM-Series NGFW #vsphere

[oktay.nabili]

here is how it looks

[PavelK]

Hello @oktay.nabili

thanks for post.

If your PA-VM is unlicensed, the session limited is expected. While unlicensed, a firewall supports a maximum of 1,200 sessions. Here is the reference in documentation: what happens when licenses expire.

Kind Regards

Pavel