topic Re: Connection HTTPS / HTTP and SSH not working in General Topics

Connection HTTPS / HTTP and SSH not working

Nicu21 — Mon, 18 Oct 2021 09:09:53 GMT

I can't connect via SSH HTTP or HTTPS to my PA-500 firewall .

I can ping it from my network and that's all .

Also , the strange thing it is that from panorama the device is reachable

I have checked the traffic -> is allow

I have checked management interface -> is allowing my IP addresses + HTTPS SSH and HTTP are ticked .

What else could be the issue ?

Re: Connection HTTPS / HTTP and SSH not working

MP18 — Mon, 18 Oct 2021 16:59:35 GMT

@Nicu21

Are you using Management Interface of PA to ssh it?

Is your IP address from which you are trying to ping is in allowed list?

Regards

Re: Connection HTTPS / HTTP and SSH not working

BPry — Tue, 19 Oct 2021 03:20:07 GMT

@Nicu21,

In addition to what @MP18 already mentioned, I would look and see if you don't have a service route configured to allow Panorama traffic and if that's actually using your management interface or not.

Enabling access to the management interface is straightforward and should be working with what you have described if you have committed the configuration and are attempting to connect to the proper IP address.

Re: Connection HTTPS / HTTP and SSH not working

Nicu21 — Tue, 19 Oct 2021 06:43:18 GMT

Are you using Management Interface of PA to ssh it? -> Yes

Is your IP address from which you are trying to ping is in allowed list? -> Yes , it is

Re: Connection HTTPS / HTTP and SSH not working

MP18 — Tue, 19 Oct 2021 12:02:34 GMT

@Nicu21

Please do PCAP on the MGMT interface while you test the ssh to PA

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleECAS

This will show you if traffic is hitting the PA or not?

Regards

Re: Connection HTTPS / HTTP and SSH not working

Nicu21 — Thu, 21 Oct 2021 10:33:41 GMT

I have removed all of the allowed IP from mgmt interface , and then it works .

Practically i dont have an explanation because my IP address was there .

Case is solved , maybe if you can help me with an explanation , why it works after