topic Re: VPN-SSL through Palo Alto in General Topics

VPN-SSL through Palo Alto

SOC_CSG — Fri, 23 May 2014 06:02:58 GMT

Hi, im having problems connecting with VPN-SSL clients (Global Protect and SonicWALL VPN Client). We have a firewall Palo Alto to go to internet and i use these VPN clients for connecting to several branches but i dont know why my Palo Alto (which VPNs go through) is having a strange behaviour. I dont see any connection in the MONITOR TRAFFIC about the start session VPN-SSL from my machine to the tunnel destination.

We have another way to go to internet through a JUNIPER SSG and in this case the clients VPN are connecting correctly and everything is working.

how palo alto treats the VPN-SSL traffic which go though itself?

thanks

Re: VPN-SSL through Palo Alto

HULK — Fri, 23 May 2014 06:12:57 GMT

Hello COS,

Are you facing this problem from a specific machine or from all machines ( with your credentials).?

Are you able to login into the GP portal with same credentials..?

You can enable debugging into the GP client to get some more information:

Troubleshooting GlobalProtect, PAN-OS 4.1

Thanks

Re: VPN-SSL through Palo Alto

SOC_CSG — Fri, 23 May 2014 06:26:41 GMT

It happens in all the machines.

Since another branch in which we also go to internet through PA it happens the same. Its like Palo Alto is denying the connection or doing something but i cant see anything in the log.....

i attached the sinicwall´s log

when it works asked me for the PSK. going trough PA it doesnt reach to asked me this.

Re: VPN-SSL through Palo Alto

SOC_CSG — Fri, 23 May 2014 06:36:13 GMT

I attached the GP log

Re: VPN-SSL through Palo Alto

SOC_CSG — Fri, 23 May 2014 08:32:43 GMT

the zone protection was the problem.......THANKS