topic emails stop working in General Topics

emails stop working

ElieChallita — Tue, 06 Feb 2024 14:47:51 GMT

hi all, i recently replace my palo alto 820 with new model 440, all is working fine however my emails from inside to outside stop working. my emails are on seperate zone on the dmz and i have barracuda. there is a nat policy.

however when i set back the old one everything works properly.

Does anyone have an idea about what is causing the issue

Re: emails stop working

Claw4609 — Tue, 06 Feb 2024 15:09:58 GMT

Is this for emails coming from the Palo itself or from clients that is no longer working? Assuming we're referring to the Palo, are both models running the same PAN-OS versions? Also verify that the service route for email is still the same from the old one to the new one. If you use a relay of some kind you may need to add the specific IP address so may be easier to have the same mgmt IP on the new one.

Assuming you're referring to emails from users, are you using the same device groups and templates (assuming managed by Panorama) on the new device as you were the old?

Re: emails stop working

ElieChallita — Tue, 06 Feb 2024 15:12:23 GMT

i am talking to the emails from users, and concerning the configuration it is the same one i have imported the same configuration to the new palo alto. i didn't change anything

Re: emails stop working

Claw4609 — Tue, 06 Feb 2024 15:13:53 GMT

Do you see the traffic in the monitor logs? Whether allowed or denied.

Re: emails stop working

ElieChallita — Tue, 06 Feb 2024 15:14:56 GMT

yes it is allowed, but the reason of end is incomplete or aged out

Re: emails stop working

Claw4609 — Tue, 06 Feb 2024 15:20:49 GMT

You may need to do some additional testing live and check the global counters to see if any specific reason is thrown. How to check global counters for a specific source and destinat... - Knowledge Base - Palo Alto Networks

I would also verify that the NAT rules and routing (whether dynamic or static) are still identical between the two as you may not be sending it to the right place or translating it to the correct IP.

Re: emails stop working

OtakarKlier — Tue, 06 Feb 2024 18:41:05 GMT

Hello,

My guess is that there is a missing or misconfiguration in one of the following: Virtual router, security policy, NAT policy.

Regards,

Re: emails stop working

Jacek_Loszewski — Fri, 08 Mar 2024 07:55:57 GMT

I would still check the App ID versions - there have been some changes in the exchange traffic (of course, if these App IDs are different on the older and newer PN).