Hi all
"I'm facing an issue in my network, and after a packet capture, I identified something strange.
Basically, I have a Palo Alto firewall that serves as my CORE. I have one segment for some servers and another for the users.
My user connects via SSH to a server, but after 10 to 15 seconds, they lose the connection.
In my packet capture, I observed several RST (Reset) packets coming from the same IP (server's IP). However, the MAC addresses are different from those of other servers."