FORW Type Session with Destination Zone captive-portal
Created On 04/16/19 20:27 PM - Last Updated 04/16/19 20:52 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection HardwareSymptom
On the PA-7000 platforms, there is one other session type defined in addition to the ones described in Palo Alto Networks Firewall Session Overview. The added session type is Forward (FORW) and is only visible on the CLI or Web GUI:
- CLI: Run show session all and look for type FORW
- WebGUI: Navigate to Monitor > Session Browser
Characteristics of the Forward session type:
- Used internally to deliver traffic
- Transient only
- Always have a destination zone "captive-portal"
Note: This occurs even if Captive Portal is not enabled on the firewall and no zone with the name "captive-portal" has been created. This does not affect the capacity or proper function of the firewall and may be ignored.