topic Re: Website unreachable in Next-Generation Firewall Discussions

Website unreachable

Muhammad_Fitri — Sat, 24 Jan 2026 05:36:23 GMT

hi my customer got an issue regarding palo alto.

This issue happens this
morning, no changes was done beforehand. The website was still accessible
yesterday until this morning.

We have done a few testings
as per below.

Office LAN users – Not
accessible

Bypass website’s Public IP
– Not accessible

Bypass website URL – Not
accessible

Wi-Fi users – Accessible

Personal hotspot –
Accessible

The impacted users are at the segment of 192.168.30.0/24. Why this happen ya ?

Re: Website unreachable

Raido_Rattameister — Sat, 24 Jan 2026 23:53:10 GMT

What URL and traffic log show from user towards website url/ip?

Re: Website unreachable

tonacoecarvalho.adv — Sun, 25 Jan 2026 04:47:55 GMT

Hi,

Classic overnight PAN-DB recategorization, site got tagged high-risk / newly-registered / whatever and hit your block rule. Wi-Fi & hotspot work because they bypass the firewall.

Quick checks on firewall CLI:
texttest url example.com
request url-filtering debug host example.com

Check Traffic logs:
source 192.168.30.0/24 + url contains "example.com" → note the rule name and action (block/deny).

Fast fix:

Objects > Custom URL Category > New
Name: Allow-ExampleSite
Add: *.example.com
In the blocking rule (or new rule above it):
Source: 192.168.30.0/24
Destination: Allow-ExampleSite
Action: allow

Or temp allow by public IP if static.
For permanent: submit recategorization at https://urlfiltering.paloaltonetworks.com.

Paste the test url output + blocking rule name here and I’ll give you the exact config lines to commit.

Fixed?