topic Re: GlobalProtect Portal Unaccessible - New Install in GlobalProtect Discussions

GlobalProtect Portal Unaccessible - New Install

B.Patton — Sat, 21 Sep 2024 05:24:17 GMT

Hi everyone,

First time user of Palo Alto, and really struggling here. After a ton of YouTube videos and PA documents, I've gone and created a GlobalProtect gateway and portal, which is attached to our static WAN interface (ethernet1/2).

From outside the network, I can ping that interface (as I have the management profile enabled for ping) just fine, and devices behind the router can reach the internet.

However, after configuring the portal and gateway, when I browse to https://WAN_IP_Ethernet1/2 from outside the network, I can't reach the portal page - it just times out. Utilizing GlobalProtect client, I get the portal is inaccessible.

I've created a Security Policy and since this isn't production, went crazy and set it up Any Source, Any Destination, and Applications are ike, ipsec, panos-global-connect, panos-web-interface, and ssl. Still nothing.

I would expect even if I have a cert issue, I'd at least get a website with a warning. I'm totally lost in this - never expected it to be this difficult in setup, in after all the tutorials I've been through. Am I missing something incredibly obvious?

Re: GlobalProtect Portal Unaccessible - New Install

Edsnow — Sat, 21 Sep 2024 13:30:43 GMT

Verify the traffic logs, your are able to see the hit from your public IP.if there is no logs, just enable packet capture and verify the traffic is reaching to the firewall interface.if it is pinging verify with tnc command for port 443.

knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0

Re: GlobalProtect Portal Unaccessible - New Install

B.Patton — Sun, 22 Sep 2024 03:23:16 GMT

Thanks for the insight - come to find out we had a bogus NAT rule that was superseding GP traffic. Fixed the rule and now things are flowing correctly. Thanks!