show log TEST Oct 12 18:48:34 CS7-HQ-FW02 clear-log[21162]: logfile cleared Oct 12 18:48:34 18:48:34.674250:CID-0:RT:<10.83.30.12/41249->143.204.229.127/443;6,0x0> matched filter TEST: Oct 12 18:48:34 18:48:34.674250:CID-0:RT:packet [60] ipid = 55133, @0x43deb19c Oct 12 18:48:34 18:48:34.674250:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 15, common flag 0x0, mbuf 0x43deaf80, rtbl_idx = 7 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: flow process pak fast ifl 78 in_ifp irb.30 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: irb.30:10.83.30.12/41249->143.204.229.127/443, tcp, flag 2 syn Oct 12 18:48:34 18:48:34.674250:CID-0:RT: find flow: table 0x523a0c60, hash 4903(0xffff), sa 10.83.30.12, da 143.204.229.127, sp 41249, dp 443, proto 6, tok 8, conn-tag 0x00000000 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: no session found, start first path. in_tunnel - 0x0, from_cp_flag - 0 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: flow_first_create_session Oct 12 18:48:34 18:48:34.674250:CID-0:RT:Save init hash spu id 0 to nsp and nsp2! Oct 12 18:48:34 18:48:34.674250:CID-0:RT:First path alloc and instl pending session, natp=0x56d97e18, id=60047 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: flow_first_in_dst_nat: in , out dst_adr 143.204.229.127, sp 41249, dp 443 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: chose interface irb.30 as incoming nat if. Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_first_rule_dst_xlate: DST no-xlate: 0.0.0.0(0) to 143.204.229.127(443) Oct 12 18:48:34 18:48:34.674250:CID-0:RT:[JSF] Do ingress interest check. regd ingress plugins(1) Oct 12 18:48:34 18:48:34.674250:CID-0:RT:[JSF][0]plugins(0x0) enabled for session = 21474896527 implicit mask(0x0), service request(0x0) Oct 12 18:48:34 18:48:34.674250:CID-0:RT:-jsf : no plugin ingress interested for session 21474896527 Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_first_routing: vr_id 7, call flow_route_lookup(): src_ip 10.83.30.12, x_dst_ip 143.204.229.127, in ifp irb.30, out ifp N/A sp 41249, dp 443, ip_proto 6, tos 0 Oct 12 18:48:34 18:48:34.674250:CID-0:RT:Doing DESTINATION addr route-lookup Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_ipv4_rt_lkup success 143.204.229.127, iifl 0x4e, oifl 0x4d Oct 12 18:48:34 18:48:34.674250:CID-0:RT: routed (x_dst_ip 143.204.229.127) from INSIDE (irb.30 in 0) to irb.22, Next-hop: 10.83.42.1 Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_first_policy_search: policy search from zone INSIDE-> zone SERVERS (0x0,0xa12101bb,0x1bb) Oct 12 18:48:34 18:48:34.674250:CID-0:RT:Policy lkup: vsys 0 zone(8:INSIDE) -> zone(10:SERVERS) scope:0 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: 10.83.30.12/41249 -> 143.204.229.127/443 proto 6 Oct 12 18:48:34 18:48:34.674250:CID-0:RT:Policy lkup: vsys 0 zone(5:global) -> zone(5:global) scope:0 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: 10.83.30.12/41249 -> 143.204.229.127/443 proto 6 Oct 12 18:48:34 18:48:34.674250:CID-0:RT: app 58, timeout 1800s, curr ageout 20s Oct 12 18:48:34 18:48:34.674250:CID-0:RT: packet dropped, denied by policy Oct 12 18:48:34 18:48:34.674250:CID-0:RT: denied by policy default-policy-logical-system-00(2), dropping pkt Oct 12 18:48:34 18:48:34.674250:CID-0:RT: packet dropped, policy deny. Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_initiate_first_path: first pak no session Oct 12 18:48:34 18:48:34.674250:CID-0:RT: flow find session returns error. Oct 12 18:48:34 18:48:34.674250:CID-0:RT:flow_proc_rc: -1. Oct 12 18:48:34 18:48:34.674250:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1) Oct 12 18:48:35 18:48:35.007248:CID-0:RT:jsf sess close notify Oct 12 18:48:35 18:48:35.007248:CID-0:RT:flow_ipv4_del_flow: sess 59961, in hash 32 Oct 12 18:48:35 18:48:35.007248:CID-0:RT:jsf sess close notify Oct 12 18:48:35 18:48:35.007248:CID-0:RT:flow_ipv4_del_flow: sess 60047, in hash 32 Oct 12 18:48:35 18:48:35.186127:CID-0:RT:<10.83.30.12/37163->143.204.229.127/443;6,0x0> matched filter TEST: Oct 12 18:48:35 18:48:35.186127:CID-0:RT:packet [60] ipid = 59023, @0x43def59c Oct 12 18:48:35 18:48:35.186127:CID-0:RT:---- flow_process_pkt: (thd 1): flow_ctxt type 15, common flag 0x0, mbuf 0x43def380, rtbl_idx = 7 Oct 12 18:48:35 18:48:35.186127:CID-0:RT: flow process pak fast ifl 78 in_ifp irb.30