topic Re: Web access issue in Next-Generation Firewall Discussions

Web access issue

sidhardhatech — Fri, 04 Aug 2023 05:35:39 GMT

One URL does not access on browser, it shows error timed out. PA-3220 we are using.

1. Create one test rule - Where you allow everything for one source only.

2. Clone the test rule and deny the "Quic" application there and put it above the test rule.

But it is not working.

please help me for this

Re: Web access issue

akuzhuppilly — Mon, 07 Aug 2023 03:04:19 GMT

Hello @sidhardhatech

Did you see the traffic is denied by the firewall due to the rule that you have created to deny the 'Quic' application? Are you able to access the URL with just the 'allow everything' rule? If the URL traffic matched to Quic application then as per your policy it will be denied hence the user won't be able to access it. You may try to narrow down it by looking into the traffic/threat/URL Filtering logs.

Re: Web access issue

sidhardhatech — Mon, 07 Aug 2023 10:37:25 GMT

we created test policy 1st rule in top of policy , any to any. Url is pinging but not opening in browser.

Re: Web access issue

akuzhuppilly — Mon, 07 Aug 2023 15:21:19 GMT

Hello @sidhardhatech ,

Is the issue specific to a particular URL or affecting all traffic?

Have you enabled SSL decryption in the firewall?

Are you able to access the URL(s) when the firewall is bypassed?

Re: Web access issue

sidhardhatech — Tue, 08 Aug 2023 04:44:07 GMT

sorry for late reply

1. paritcular url we facing this issue

2. we are not using any decryption policy.

3. we have access the url , firewall is bypassing it.

The url is pinging in browser and In traffic logs it allow ping only.

Please share any document or any solution for this.

Re: Web access issue

sidhardhatech — Thu, 10 Aug 2023 07:43:10 GMT

Please update ?

Re: Web access issue

SutareMayur — Thu, 10 Aug 2023 11:54:41 GMT

Hi @sidhardhatech

Sorry, didn't get you fully - What do you mean by "The url is pinging in browser and In traffic logs it allow ping only." ?

I would recommend you to confirm below things -

1. What are the traffic logs for the URL when accessed from the browser ? Is it matching desired security policy ?

2. Also if you have any security profiles attached to the security policy, kindly verify respective logs also for the web traffic.

3. Did you tried to take packet capture for the web traffic? Packet capture will give you more clarity.

Re: Web access issue

sidhardhatech — Fri, 11 Aug 2023 11:07:14 GMT

while we are checking Pcap in Wireshark, we found tcp RST.

problem is not solved

Re: Web access issue

sidhardhatech — Fri, 11 Aug 2023 11:07:48 GMT

while we are checking Pcap in Wireshark, we found tcp RST.

problem is not solved