topic Re: Palo Alto VM No Internet in Browser in General Topics

Palo Alto VM No Internet in Browser

hamzabenhamani — Sun, 25 Apr 2021 23:40:12 GMT

Hello,

I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.
from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?

Thanks.

Re: Palo Alto VM No Internet in Browser

nikoolayy1 — Mon, 26 Apr 2021 07:10:18 GMT

Did you do any policy trace as you may have allowed just the icmp and not web-browsing or SSL (if you don't do decryption Palo Alto will see most applications as just SSL)?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla1CAC

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQSCA0

Re: Palo Alto VM No Internet in Browser

hamzabenhamani — Mon, 26 Apr 2021 21:57:23 GMT

Thanks for your reply, i allowed all services not only icmp.

Re: Palo Alto VM No Internet in Browser

nikoolayy1 — Wed, 28 Apr 2021 19:36:03 GMT

You may also do policy trace for the NAT and check if you are using SSL decryption as if it is not configured corectly you may see issues. I suggest also doing pcap capture at drop and transmit stage as to see if the firewall is droping the traffic or not transmitting it as it could be GNS3 issue. I have made an article in live palo alto for such checks if the issue really is because of the firewall:

https://live.paloaltonetworks.com/t5/general-topics/palo-alto-checking-for-drops-slowness-and-counters/m-p/402102#M91777