Q: We see many incomplete status under Application in our Paloalto Firewall. Is this application issue or Firewall issue?

A: Based on our experience, this is Application issue. It could be the user enter incorrect credentials. Or firewall blocks the connection, for example firewall may opens a port 21 for FTP, but FTP passive mode uses port rang from 1024 to 65535.