Authentication Profile not loading local web auth page

TravisFleming — Tue, 31 Oct 2023 19:22:25 GMT

Trying to create an authentication profile so when traffic goes to an internal esxi host at https://10.10.245.99 they get an additional authentication prompt from the local firewall for a local firewall user. Very simplistic I was hoping. I followed the below configuration article from Palo and followed it I believe to the tee. However when I navigate to that site, I do get redirected to the below URL which seams correct, but the page does not load. When I look on the firewall traffic logs, I do see traffic to that .99 IP on port 6082 is being allowed. On the firewall under the mgmt interface, I made sure to check the box for allowing auth.

I did also try redirecting to a non-mgmt interface on the firewall, while allowing auth and the redirects to that interface, but I get the same redirect page, but with the interface IP instead of my mgmt IP.

In looking in other logs I'm not seeing anything in relation to this. Where can I go to troubleshoot this, or what could I be missing?

Redirected page:
(https://10.10.245.2:6082/php/uid.php?vsys=1&rule=0&token=UG50_Wx4lUHgtnr4lu1i34_FDu4=&url=http://10.10.245.99%2f)

Article I followed to initial setup:
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/authentication/authentication-policy/configure-authentication-policy

topic Authentication Profile not loading local web auth page in Next-Generation Firewall Discussions

Authentication Profile not loading local web auth page