topic Re: Help support in General Topics

Help support

Zola12 — Sun, 28 Apr 2024 14:15:09 GMT

Dear Palo alto family,

I face some difficulty to ping internet on DMZ , i am trying to configure a security policy DMZ_to_Public/ WAN but still i didn't ping 8.8.8.8 in DMZ switch and didn't ping in firewalls itself also.

Help me to solve this issue pls

Re: Help support

Arnesh — Sun, 28 Apr 2024 14:32:17 GMT

Hi @Zola12 ,

I understand that there are 2 things which are trying to fix:

1. Ping is not working from DMZ to Internet

2. Ping not working when doing from DMZ Switch towards DMZ firewall interface.

To answer point 1, you need to make sure you have a proper security policy, NAT policy, Internet facing interface correct configuration.

Can you ping 8.8.8.8 from your firewall's Internet facing interface?

To answer point 2, if you need to ping the firewall interface, you need to enable ping on the interface.

Please refer to this KB - How to Allow Ping and ICMP on Layer 3 Interface of Your Palo Alto Networks Device

Re: Help support

Zola12 — Sun, 28 Apr 2024 17:15:21 GMT

Dear palo alto family,

internet is out from DMZ , the only issue is 8.8.8.8 is not pinging

help me to share security policy and NAT policy from DMZ to WAN if you have please

also does public IP required to ping 8.8.8.8?

Re: Help support

Arnesh — Tue, 30 Apr 2024 06:41:55 GMT

Setting up basic security-policy and NAT policy should not be a tough task. I do not have a lab firewall handy now to show the basic rules.

Here is a youtube video which you can refer which helps with basic network connectivity.

As only the ping does not work and rest Internet access works, check if application is added to the to the rule if app-based security policy is configured.

have you checked the traffic logs (GUI > Monitor > Traffic logs) to see if the traffic is allowed or blocked?