topic twitter not working in General Topics

twitter not working

Joshan_Lakhani — Sat, 15 Aug 2020 08:23:01 GMT

Twitter is not working. I create the simple policy but I got this error. aslo create the application override but still I got same error i have also change my browser but still same please suggest.

Re: twitter not working

Remo — Sat, 15 Aug 2020 14:20:37 GMT

@Joshan_Lakhani Some more information would be nice in order to help here ...

Is internetaccess in general working?
How does the security policy look like?
Do you have dropped connections in the log?
Is TLS decryption enabled and working properly?

Re: twitter not working

Joshan_Lakhani — Sat, 15 Aug 2020 14:30:55 GMT

@Remo thanks for you reply

Is internetaccess in general working?

Yes internet is working fine once we bypass the paloalto and connect directly laptop with ISP router it's working fine once i connect laptop behind the palolalto i go this error.

How does the security policy look like

Create test policy the security policy source “any” destination “any” destination ip address 10.x.x.x Application any and remove security profiles and action “allow” and put on TOP

Do you have dropped connections in the log?

In traffic log Session reason "TCP Fin "

Is TLS decryption enabled and working properly?

No decryption is enable

Addition Information: i have also create the application override but issue still same

I have delete the browse cookies but issue still not response. Please suggest

Re: twitter not working

Remo — Sat, 15 Aug 2020 15:04:27 GMT

@Joshan_Lakhani So when you are behind the paloalto, you only have problems with twitter or with internetaccess in general?

Re: twitter not working

Joshan_Lakhani — Sat, 15 Aug 2020 15:14:55 GMT

@Remo

No only the issue is with Twitter

all the other social networking site are allow and it's working fine

Re: twitter not working

Remo — Sat, 15 Aug 2020 16:23:58 GMT

@Joshan_Lakhani Do youbuse url filtering? If yes, do you have blocked categories configured and did you also check the url log for blocked urls?

Did you try with a policy that allows any?

Re: twitter not working

Joshan_Lakhani — Sat, 15 Aug 2020 17:29:14 GMT

@Remo

I have create the policy any but the issue still same

Re: twitter not working

Remo — Sat, 15 Aug 2020 17:52:32 GMT

In this case please open the website again but this time with developer tools opened in the browser and then go to the network tab. There you should see if some requests are failing. For further help here I kindly ask you to provide some more screenshots (network tab of the developer tools, security policy, logs on the firewall).

Re: twitter not working

MP18 — Sun, 16 Aug 2020 19:02:07 GMT

@Joshan_Lakhani

You really need to check the Traffic logs and URL filtering logs for any errors.

Also Run this command from CLI

show session all filter source your pc ip destination twiter ip

--------------------------------------------------------------------------------
ID Application State Type Flag Src[Sport]/Zone/Proto (translated IP[Port])
Vsys Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
12913 web-browsing ACTIVE FLOW *NS 192.168.200.105[53346]/NetGear_DMZ/6 (x.x.x.x[1750])
vsys1 104.244.42.194[443]/PA_EXT (104.244.42.194[443])

Regards

Re: twitter not working

Joshan_Lakhani — Sun, 16 Aug 2020 19:09:40 GMT

@MP18 Thanks for you reply

As we are not using the URL Filtering and in the session id Traffic is "TCP-FIN"

Re: twitter not working

MP18 — Sun, 16 Aug 2020 19:18:09 GMT

@Joshan_Lakhani

As Remo mentioned do the developer tools in your browser and do the PCAP with source and destination IP address.

Regards

Re: twitter not working

Joshan_Lakhani — Tue, 18 Aug 2020 19:11:55 GMT

@MP18 @Remo

Today i took the PCAP and does not find any drop on Firewall.

But i open FW file i can see this can you please suggest me

Re: twitter not working

MP18 — Tue, 18 Aug 2020 23:40:04 GMT

@Joshan_Lakhani

This error normally comes if we are doing ssl decryption on the traffic and one of the reason can be Cert pinning.

As you said you are not doing ssl decryption and you are using custom application override for this rule?

I ill suggest make a new test rule without any application override and move this new rule on top from the current security rule and

please test again.

Regards