topic Re: Website blocked automatically by the firewall in Next-Generation Firewall Discussions

Website blocked automatically by the firewall

gdu_palo — Wed, 23 Sep 2026 11:08:27 GMT

I am using PA-410. In our network, one specific website is blocked automatically by the firewall. I created a URL filtering, added URLs to the whitelist, and allow in the profile. Nevertheless, users cannot access the website. When I monitor the traffic, there is "undecided" in front of the application. End Reason is unknown. State is Active.
Could you please help me to solve this issue?

Re: Website blocked automatically by the firewall

reaper — Wed, 23 Sep 2026 11:36:58 GMT

sounds like its getting blocked before the url even matters (else i would expect the app-id to be ssl or web-browsing.

are you able to copy (redacted) output from the log or session state here so we get a little more context ?

Re: Website blocked automatically by the firewall

gdu_palo — Wed, 23 Sep 2026 11:54:18 GMT

Thank you for the quick response. I have attached the screenshot here.

Re: Website blocked automatically by the firewall

reaper — Thu, 24 Sep 2026 07:54:19 GMT

ok, this session tells us the connection is being allowed, the source is being NAT'ed but the session timed out during the handshake. this could mean the remote IP is not reachable or not accepting your connections quietly (no RST or FIN but silent drop), or there could be some routing issue upstream

have you doublechecked your source NAT IP, that it is correct and 'reachable' from the internet? are other hosts able to reach that destination IP address?

Re: Website blocked automatically by the firewall

gdu_palo — Fri, 25 Sep 2026 10:38:21 GMT

Everything is OK with NAT. Other hosts are not able to reach that site either. But when I change the network, the site opens without any problem.
Recently, we updated licenses. Since this process, we have been experiencing issues like this. Some low-risk websites also could not open on the network. I tried disabling all restriction rules and checking them, but nothing has changed. That's why I decided to ask for help.
Is it possible to bypass the firewall for a short period?