Deny VDOM Sessions duplication

Forum|Forum|1 year ago
February 7, 2025
6 replies
1216 views

Hi everyone,
I have 4 Vdoms (Internet - local DC servers - Paretener - SSL VPN & IPsec), I have observed that one session is duplicated over every VDOM traffic that passes it. how I can terminate sessions from repeating through other vdoms?
-Example:
SSL users want to connect to the DC server and use the internet, the session will throw (SSL Vodm) then through ( DC srv vdom), and so on.... this causes multiple sessions consuming device resources. any idea to prevent the same sessions over multiple vdoms?

Thanks for all,

VDOM

funkylicious

SuperUser

hi,

quickest/simplest way would be to have all resources access/connect to the same vdom, otherwise the traffic flow will respect the routing table and go through all of them and create a session in each one

"jack of all trades, master of none"

dingjerry_FTNT

Staff

Hi @ehabali ,

1) First of all, VDOM is a virtual device actually. So you must have a session in the session table if the traffic is passing through the VDOM. If you terminate the session in one VDOM, that means the traffic will be denied due to no session matched in the VDOM.

2) Next, what VDOMs the traffic is passing through is based on your routing table and firewall policy.

ehabaliAuthor

New Member

Thanks, @dingjerry_FTNT for your interest,
I know that it is logical that sessions are created in every vdom, but I was asking for any workaround to avoid session duplication as it is just passed to the next firewall such as Palo.
—To clarify what I think, I want SSL vdom when asking to access a server that is located under the Palo Alto DC firewall. I want the session to be created just on SSL Vdom, then pass through DC vdom to continue to Palo firewall, reach the actual server, and so on when traffic returns. Just created in one vdom. Is there any way to apply that?

dingjerry_FTNT

Staff

Hi @funkylicious ,

No, we do not support this feature.

Sign up

Login with SSO

Login to the community

Login with SSO