Palo Alto and Docker configuration

damian.krawczyk — Tue, 24 Sep 2024 10:32:10 GMT

Hello Team,

I am a new in PA firewall. In my home lab I have old PA220 and Ubuntu host on which I have installed docker and few apps in cointainers. I have port forwarding rule which translate my local resources to my public IP address and ports- this work fine. But when app in cointainer wants to access from inside Ubuntu host to external IP address and port (which is translated to this local ubuntu host) I have timeout. I cannot see any traffic in logs, nothing. On some forum I found that: Some firrewalls are cranky about allowing traffic out and back in but I dont belive that there is no option to configure this correct in PA.

Problem: traffic from inside host try to rich his public IP address and come back to local ip- timeout.

Any suggestion will be appreciated.

Sorry for my poor english 🙂

Regards,

Damian

Re: Palo Alto and Docker configuration

damian.krawczyk — Tue, 24 Sep 2024 14:10:30 GMT

Solution is configure U-Turn Nat

topic Re: Palo Alto and Docker configuration in Next-Generation Firewall Discussions

Palo Alto and Docker configuration

Re: Palo Alto and Docker configuration