topic Re: sslvpn 4.0.x issue in General Topics

sslvpn 4.0.x issue

Retired Member — Fri, 05 Apr 2013 07:45:23 GMT

Hi,

When configuring sslvpn we tried to use an Adsl modem which makes its public 1.1.1.1 NAT 443 to a local ip 172.16.2.1

this ip is PaloAlto's L3 interface.Default gateway of PaloAlto is 172.16.2.2 which is modem.

People can access to internet from PaloAlto with modem's public ip (NAT enabled on modem)

When we access to public ip of modem with https://1.1.1.1 no sslvpn page comes !

When we look to monitor I see traffic from my ip to 172.16.2.1 as ssl allow

but no portal page comes what can this be ?

panos 4.0.10

Re: sslvpn 4.0.x issue

wesa — Fri, 05 Apr 2013 15:15:32 GMT

Hi bulent

do you see https enabled in the management profile? when you do >show ssl-vpn flow do you see your Portal name listed and the interface, tunnel it's associated to?

Re: sslvpn 4.0.x issue

Retired Member — Fri, 05 Apr 2013 16:06:34 GMT

let me check and write back

thanks for help.good to see someone for 4.0.x

Re: sslvpn 4.0.x issue

Retired Member — Fri, 05 Apr 2013 16:11:57 GMT

I did not enable https on interface because the document is telling do not

Re: sslvpn 4.0.x issue

VinceM — Mon, 08 Apr 2013 13:26:55 GMT

Hi,

No need activate https on interface. Please, first thing, confirm that if you are connected directly on same subnet as you PA's outside interface, portal is OK, if not, should be a SSL issue (maybe comming from cetifiat error depending of the error message). Next step, if it's work, doing the same from outside, work => OK, doesn't, routing issue.

rgds