topic Re: Not displaying palo alto login page in VM-Series in the Public Cloud

Not displaying palo alto login page

Dilton111 — Sun, 01 May 2022 11:47:33 GMT

Hi all,

When i typed in my default gateway IP address it is displaying BT Smart Hub Manager page instead of Palo Alto login page.

I did all the configuration connecting VirtualBox and Palo alto. Do I missing something why isn't displaying palo alto login page? It has been few days i am trying to find the solution. Help please.

Re: Not displaying palo alto login page

W_Rafalski — Wed, 04 May 2022 07:58:42 GMT

Hello,

I guess you've deployed PA-VM on VirtualBox ? By default MGMT interface of VM gets IP address from DHCP. 192.168.1.1 is for hardware only. I would open console of VM through VirtualBox - in the end of booting process there is info about what IP VM got.

Did I understand your problem correctly ?

Re: Not displaying palo alto login page

Dilton111 — Wed, 04 May 2022 11:11:57 GMT

Yes I did deployed PA-VM on VirtualBox. I did check my default gateway is 192.168.1.254. but when I entered the ip address is bringing me to my hub manager page and not to palo alto login page. Hub manager page(My ISP webpage) it is showing all devices that are connected to the hub include PA-VM. But I don't how to access palo alto login page.

Re: Not displaying palo alto login page

W_Rafalski — Wed, 04 May 2022 11:48:05 GMT

Hello,
you shouldn't use defaut gateway address, but PA-VM address. It's not the same. On VirtualBox your PA is normal VM, like Windows Server or Centos. You don't go to the Internet through PA.

1) Just reboot your PA-VM, click twice on it in VirtualBox-> you will get console and after booting there will be info about leased IP address. IP address you should use in web browser (always with https://)

Second option:

2) Click twice on you running PA-VM in VirtualBox, log in using admin/admin credentials and then use command "show system info". Here is example:

admin@anuragFW> show system info

hostname: anuragFW
ip-address: 10.21.56.125
netmask: 255.255.255.0
default-gateway: 10.21.56.1

Re: Not displaying palo alto login page

sthornton — Wed, 04 May 2022 15:48:52 GMT

Try using the IP Address picked up by the VM, not the default gateway.

Re: Not displaying palo alto login page

Dilton111 — Wed, 04 May 2022 17:28:41 GMT

I did that. this is the IP address 192.168.1.78 But I am getting this message below:

This site can’t be reached

192.168.1.78 refused to connect.

Try:

Checking the connection

ERR_CONNECTION_REFUSED

Reload

Hide details

Re: Not displaying palo alto login page

W_Rafalski — Wed, 04 May 2022 19:16:04 GMT

So you need to do basic troubleshooting:

1. Be sure your PA-VM is running and finished booting process.

2. Try to ping PA-VM from host.

3. Try to log into PA-VM, then ping your host from CLI:

> ping host <your host IP address>

4. Check if you don't block untrusted certificates ? New PA uses self-sign cert. By default you have to use https://

Re: Not displaying palo alto login page

Dilton111 — Wed, 04 May 2022 23:31:10 GMT

2- it is ok. ping was successful

3. Trying to ping . I am getting this message "invalid syntax".

Re: Not displaying palo alto login page

W_Rafalski — Thu, 05 May 2022 06:49:57 GMT

"Invalid syntax" means you have a "typo", use "TAB" to complete command.

Properly used command example:

> ping host 1.2.3.4

you will "ping" address 1.2.3.4 from your management interface. You can try as well:

> ping source <address of one of PA-VM interfaces> host <your host IP address>

Did you check you accept untrasted certs in your web browser ?

Re: Not displaying palo alto login page

Dilton111 — Thu, 05 May 2022 10:15:50 GMT

Yes. Ping successful to the host.

Untrusted certs. I deleted from mac "my certificates". But I still getting the same message from browser.

I am using google chrome. I went to settings and security and added https with ip address. but still isn't working.

Re: Not displaying palo alto login page

W_Rafalski — Thu, 05 May 2022 10:35:04 GMT

1) Try to get into through http. First turn it on:

> configure

# set deviceconfig system service disable-http no

# commit

Then connect through web browser http:// ....

2) What version of PAN-OS do you use ?

Re: Not displaying palo alto login page

Dilton111 — Thu, 05 May 2022 20:28:07 GMT

2) 9.0.4

Re: Not displaying palo alto login page

Dilton111 — Thu, 05 May 2022 20:37:36 GMT

still getting the same message:

This site can’t be reached

192.168.1.78 refused to connect.

Try:

Checking the connection

ERR_CONNECTION_REFUSED

Re: Not displaying palo alto login page

W_Rafalski — Fri, 06 May 2022 06:55:08 GMT

So, if you say there is a network connection from both sides (ping) and you enabled http, try:

1) Open Web Gui using incognito mode (cache issues)

2) Open Web Gui using other web browser

3) Try to disable any browser extensions

4) Try to temporary disable local antivirus or firewall

Check server-side:

5) https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POIHCA4

By the way, 9.0.x is out-of-date, do you really need to use this version ?

Re: Not displaying palo alto login page

Dilton111 — Sat, 07 May 2022 11:12:30 GMT

I can't understand if I did all these configurations. and I can ping both sides. But it still not opening palo alto login page.

I am using mac but I saw some video on online people managed to display the PA login page. I have been fighting for weeks without any solution.

Re: Not displaying palo alto login page

W_Rafalski — Tue, 10 May 2022 09:23:15 GMT

It's strange, you're right.

In my opinion ERR_CONNECTION_REFUSED points clearly that something on your Mac block access to WebUI. It's local deployment. If you say web services works properly on PA-VM machine there is small chance for other option.

Sometimes, what is not direct solution but can save your time, best what can be done, is just redeploy VM or reinstall VirtualBox.