topic Website blocked automatically by the firewall in Next-Generation Firewall Discussions

Website blocked automatically by the firewall

gdu_palo — Wed, 23 Sep 2026 11:08:27 GMT

I am using PA-410. In our network, one specific website is blocked automatically by the firewall. I created a URL filtering, added URLs to the whitelist, and allow in the profile. Nevertheless, users cannot access the website. When I monitor the traffic, there is "undecided" in front of the application. End Reason is unknown. State is Active.
Could you please help me to solve this issue?

Re: Website blocked automatically by the firewall

reaper — Wed, 23 Sep 2026 11:36:58 GMT

sounds like its getting blocked before the url even matters (else i would expect the app-id to be ssl or web-browsing.

are you able to copy (redacted) output from the log or session state here so we get a little more context ?

Re: Website blocked automatically by the firewall

gdu_palo — Wed, 23 Sep 2026 11:54:18 GMT

Thank you for the quick response. I have attached the screenshot here.

Re: Website blocked automatically by the firewall

reaper — Thu, 24 Sep 2026 07:54:19 GMT

ok, this session tells us the connection is being allowed, the source is being NAT'ed but the session timed out during the handshake. this could mean the remote IP is not reachable or not accepting your connections quietly (no RST or FIN but silent drop), or there could be some routing issue upstream

have you doublechecked your source NAT IP, that it is correct and 'reachable' from the internet? are other hosts able to reach that destination IP address?