Palo Alto Networks Knowledgebase: FORW Type Session with Destination Zone captive-portal

FORW Type Session with Destination Zone captive-portal

Created On 04/16/19 20:27 PM - Last Updated 04/16/19 20:52 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection Hardware

On the PA-7000 platforms, there is one other session type defined in addition to the ones described in Palo Alto Networks Firewall Session Overview. The added session type is Forward (FORW) and is only visible on the CLI or Web GUI:

  • CLI: Run show session all and look for type FORW
  • WebGUI: Navigate to Monitor > Session Browser


Characteristics of the Forward session type:
  • Used internally to deliver traffic
  • Transient only
  • Always have a destination zone "captive-portal"
    Note: This occurs even if Captive Portal is not enabled on the firewall and no zone with the name "captive-portal" has beenĀ created. This does not affect the capacity or proper function of the firewall and may be ignored.

owner: aciobanu

  • Print
  • Copy Link

Choose Language