topic Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall in General Topics

I’m facing an issue with L3 int which is configured on Palo Alto firewall

Hassan958 — Tue, 24 Dec 2024 06:02:11 GMT

Hi Team,

I’m encountering an issue with Poly devices on VLAN 20, which is routed through the firewall with its L3 interface configured. The devices successfully pair at first time with Teams but after a reboot they fail to maintain pairing afterward, despite having a rule that allows all traffic from the VLAN 20 .

Interestingly, when these devices are moved to VLAN 10 (behind the core), they work without any issues.

Note: They are not losing any Hardware connectivity and working fine on same port with Vlan 10 which is behind the core switch

Has anyone faced a similar issue or have any recommendations? Your input would be greatly appreciated.

Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall

Brandon_Wertz — Tue, 24 Dec 2024 18:50:26 GMT

@Hassan958 wrote:

Hi Team,

I’m encountering an issue with Poly devices on VLAN 20, which is routed through the firewall with its L3 interface configured. The devices successfully pair at first time with Teams but after a reboot they fail to maintain pairing afterward, despite having a rule that allows all traffic from the VLAN 20 .

Interestingly, when these devices are moved to VLAN 10 (behind the core), they work without any issues.

Note: They are not losing any Hardware connectivity and working fine on same port with Vlan 10 which is behind the core switch

Has anyone faced a similar issue or have any recommendations? Your input would be greatly appreciated.

What do the traffic logs show for traffic on this VLAN?

Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall

OtakarKlier — Tue, 24 Dec 2024 18:53:49 GMT

Hello,

Check the unified logs to see what is getting blocked.

Regards,

Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall

Hassan958 — Tue, 24 Dec 2024 21:20:19 GMT

I can see traffic from that VLAN, and everything is set to allow only.

Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall

Hassan958 — Tue, 24 Dec 2024 22:01:50 GMT

No deny logs so far

Re: I’m facing an issue with L3 int which is configured on Palo Alto firewall

OtakarKlier — Fri, 27 Dec 2024 18:26:23 GMT

Hello,

Since its Teams, check your outbound policies to make sure that all traffic is allowed to O365. I use External Dynamic Lists in my policies to make this more dynamic for me. Just make sure to choose the correct lists.

https://saasedl.paloaltonetworks.com/feeds/

Regards,