Some generated logs for the same rule connections have inbound direction and others outbound.

[KostasGR]

Hello

We observed that some generated logs for the same rule with similar src,dst,port have inbound direction and others have outbound.

Can someone explain it? On inbound direction logs the source and destination zone is internal as the log says . On outbound direction logs the source and destination zones are empty on relevant logs.

The interface is a wrp (vswitch) on a VS.

BR,

Kostas 

[PhoneBoy]

Precise examples from log cards (redacting sensitive data) might be helpful here.