topic Re: External IP address not able to resolve internal webservers in General Topics

External IP address not able to resolve internal webservers

Farzana — Tue, 11 Jul 2017 06:04:19 GMT

Hello,

We are unable to open page externally. is there any article to point us on this issue?

Using PAN-OS 7.1.10

No recent change/upgrade done.

All router config and NAT checked.

No issue from ISP.

Thanks in advance.

Re: External IP address not able to resolve internal webservers

TranceforLife — Tue, 11 Jul 2017 06:27:45 GMT

Hi,

Are you looking for 1x1 NAT config:

Quite easy to get confused with one to one NAT 🙂

Re: External IP address not able to resolve internal webservers

Farzana — Tue, 11 Jul 2017 07:24:52 GMT

Hello TranceforLife,

We are using Source Address Translation. The setup was working fine before. There are quite a few internal Servers and they talk to each other no problem. We can open web URL's internally.

Re: External IP address not able to resolve internal webservers

reaper — Tue, 11 Jul 2017 07:30:45 GMT

you'll need to add another NAT policy for untrust-untrust as @TranceforLife pointed out , the 'hosting' to 'internet' NAT policy will only take care of connections going out to the internet

check out this getting started article and tutorial video : Getting Started: Network Address Translation (NAT)

Re: External IP address not able to resolve internal webservers

Farzana — Fri, 14 Jul 2017 01:41:04 GMT

Thank you all for the responses. As I mentioned before that the FW was working fine with the NAT setup and suddenly the issue started. We logged a support case and found the traffic was dropped by the zone protection associated with the Internet zone - strict IP address check.

Re: External IP address not able to resolve internal webservers

filipefarias — Tue, 30 Jun 2020 20:05:44 GMT

Hello Farzana,

For you to resolve this problema, did you have to disable or strick ip address or some other option?

Thank you