Internet issues

Zola12 — Fri, 02 May 2025 18:15:18 GMT

Dear all,

I connect ISP directly to the Cisco switch and from the same Cisco switch I connect the outer ISP interface and connect To Firewall , the Firewall LAN interface again passes through the Cisco switch to the internal network. Are there any compatibility issues between palo alto and Cisco switch? which means i used cisco switch as media converter, but after completing all configuration in PA460, still i didn't get any internet.

i need your help pls

what type configuration is required in cisco switch side?

is there any completability issue between cisco switch and palo alto firewall? Not that just i only used Cisco switch for media converter purpose.

the interface in cisco side also showing up but no internet in Network

the topology's is attached below

Re: Internet issues

rdumoulin — Mon, 05 May 2025 05:43:53 GMT

Hello @Zola12 ,

The quickest way is to check at the traffic logs: Monitor>Logs>Traffic. Do you see any traffic at all? Look at the "Detailed Log View" and see what is going on

You could also follow the following methodology: (bear in mind that you need to configure the FW interfaces, the zones (trust, untrust), the virtual router, the NAT policy and a security policy)

1. Document the vlan numbers, the IP subnets of your topology, the zones in your FW, for better visibility and easier troubleshooting

2. from the FW CLI, ping the ISP Public IP and the internal Network. Does it work?

3. Check the routing table from the GUI: Network>Virtual Routers>default>More Runtime Stats. Is your default route configured?

4. Check the Source NAT configuration. Policies>NAT. Did you configure Source NAT?

5. Check the Security Policies. Policies>Security. Did you configure a security policy?

Regards

topic Internet issues in Next-Generation Firewall Discussions

Internet issues

Re: Internet issues