View session table to confirm if traffic hit the policy in paloalto firewall via CLI

show session all filter ...

This command filters the session table (active traffic sessions) and shows details including:

• Source/Destination IP & port

• Application, protocol, and action

• Security policy name that was matched

> show session all filter source <source-ip> destination <destination-ip>

You can add optional filters for fine-tuning:

> show session all filter source <src-ip> destination <dst-ip> destination-port <port>
> show session all filter application <app-name>
> show session all filter rule <rule-name>