An administrator has configured PAN-OS SD-WAN and has received a request to find out the reason for a session failover for a session that has already ended. Where would you find this in Panorama or fi

The correct answer is A. Traffic Logs. SD-WAN session failover information for completed sessions is recorded in Traffic Logs. PAN-OS writes session-end log entries that include SD-WAN-specific fields such as the reason for path failover, the original and new SD-WAN link used, and the failover trigger. The Session Bro

Submitted by salim_om· Apr 18, 2026Configuration Troubleshooting

Question

An administrator has configured PAN-OS SD-WAN and has received a request to find out the reason for a session failover for a session that has already ended. Where would you find this in Panorama or firewall logs?

Options

ATraffic Logs
BSystem Logs
CSession Browser
DYou cannot find failover details on closed sessions

How the community answered

(31 responses)

A
87% (27)
B
3% (1)
C
3% (1)
D
6% (2)

Explanation

SD-WAN session failover information for completed sessions is recorded in Traffic Logs. PAN-OS writes session-end log entries that include SD-WAN-specific fields such as the reason for path failover, the original and new SD-WAN link used, and the failover trigger. The Session Browser (C) only shows active sessions and cannot display closed session history. System Logs (B) record system-level events but not per-session SD-WAN failover detail. Therefore, Traffic Logs are the correct and only place to retrospectively investigate SD-WAN failover reasons for ended sessions.

Topics

#SD-WAN#Logging#Troubleshooting#Session Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice