topic Re: Palo Alto blocks outbond cisco any connect traffic in General Topics

Palo Alto blocks outbond cisco any connect traffic

SachinA — Thu, 21 Nov 2019 05:49:01 GMT

Hi ,

i a new to Palo alto world. one of my user is trying to connect a VPN connection using anyconnect, but it not working when traffic is passing from palo alto, but when i access it from open internet it is working fine.

Prompt response will be highly appreciated.

Re: Palo Alto blocks outbond cisco any connect traffic

OtakarKlier — Thu, 21 Nov 2019 20:11:12 GMT

Hello,

Its best to check the logs to see why its getting blocked. My guess would be the application is not allowed. Here is the application grouping I allow:

Regards,

Re: Palo Alto blocks outbond cisco any connect traffic

SachinA — Mon, 23 Dec 2019 15:41:35 GMT

Thanks for reply. i am able to get it fixed.

for everybody information Palo has issue while working with Cisco anyconnect in decryption the traffic.

So i bypass the decryption and restrict the traffic based on decryption policy.

Thanks

Re: Palo Alto blocks outbond cisco any connect traffic

Nehmaan — Thu, 27 Feb 2020 18:44:30 GMT

You just have to "No-Decrypt" the following two categories.

Within Anyconnect if you use:

IP: Unknown Category

DNS: Low-Risk Category