Blog

Why Palo Alto Firewall Drops Packets Without Showing Anything in Traffic Logs

PALOALTO FIREWALL CONFIGURATION, MANAGEMENT & TROUBLESHOOTING
Palo Alto

Why Palo Alto Firewall Drops Packets Without Showing Anything in Traffic Logs

 

In this blog, we’ll explore the most common reasons why Palo Alto Firewalls drop packets without any entry in the traffic logs, and how you can investigate and resolve these hidden issues.

If you prefer watching, check out my YouTube video where I walk through these scenarios with real examples.

If a packet is dropped before it reaches the logging stage, it won’t appear in the traffic logs

Top Reasons Why Packets Are Dropped Without Logging

  1. Invalid IP header or malformed packets – Checksum or integrity check issue
  2. No route found to destination (Routing problem)
  3. No entry in session table and also not a first packet

Firewall puts something in traffic Log only if it hits security policy so if there is no route and packet is dropped log will not show anything

Leave your thought here

Your email address will not be published. Required fields are marked *