topic Re: Internal Gateway not working in General Topics

Internal Gateway not working

dpeterson4 — Tue, 02 Jul 2019 15:41:49 GMT

I'm trying to create an internal gateway to be able to capture User ID fully and start creating User ID based rules. I created the dns records and put the gateway on a loopback interface on the firewall that is in the internal trusted zone. I have done the cert work and confirmed that the name resolution is working.

When looking at the logs it says "Failed to ssl connect to 'ip address' .

When looking at the connection tab on the global protect client it is showing both the internal and external gateways but it's not showing authenticated on either. When I connected to an external network the external gateway connects and authenticates so I believe at least the Portal is working.

Re: Internal Gateway not working

OtakarKlier — Tue, 02 Jul 2019 19:26:46 GMT

Hello,

Check the traffic logs and see if you are getting blocked somewhere.

Regards,

Re: Internal Gateway not working

S.Cantwell — Tue, 02 Jul 2019 22:21:55 GMT

here are some hyperlinks to articles about internal gateway

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClH1CAK

This one is for mixing internal and external

https://docs.paloaltonetworks.com/globalprotect/8-0/globalprotect-admin/globalprotect-quick-configs/mixed-internal-and-external-gateway-configuration#

review both and see if they fill in the blanks with anything.

We are here to assist you. Thanks.