topic Re: Test Mail getting failed in General Topics

Test Mail getting failed

VishnuPS — Thu, 02 Sep 2021 11:41:09 GMT

Dear Team,

We have tried to create a email scheduler, We don't have a local SMTP server. We getting the below error,

Please find the packet flow below.

c2s flow:
source: 10.1.1.5 [LAN]
dst: 172.217.194.109
proto: 6
sport: 56175     dport: 25
state: INIT    type: FLOW
src user: unknown
dst user: unknown
ecmp id: 8000

s2c flow:
source: 172.217.194.109 [WAN]
dst: 182.74.53.90
proto: 6
sport: 25 dport: 64050
state: INIT type: FLOW
src user: unknown
dst user: unknown

start time : Thu Sep 2 14:27:23 2021
timeout : 15 sec
total byte count(c2s) : 541
total byte count(s2c) : 700
layer7 packet count(c2s) : 7
layer7 packet count(s2c) : 8
vsys : vsys1
  application : gmail-base
rule : PaloAlto-Management-Email
service timeout override(index) : False
session to be logged at end : True
session in session ager : False
session updated by HA peer : False
address/port translation : source
nat-rule : Outgoing_Internet-Airtel(vsys1)
layer7 processing : enabled
URL filtering enabled : True
URL category : any
session via syn-cookies : False
session terminated on host : False
session traverses tunnel : False
session terminate tunnel : False
captive portal session : False
ingress interface : ethernet1/1
egress interface : ethernet1/3
session QoS rule : N/A (class 4)
  tracker stage firewall : TCP FIN
end-reason : tcp-fin

Packet flow seems good but still getting test mail error like unable to send mail via gateway smtp.gmail.com

Regards,

Vishnu

Re: Test Mail getting failed

ShaiW — Thu, 02 Sep 2021 12:37:04 GMT

What PANOS version are you running?

Please note that PAN 9.1 and below only support standard SMTP (unauthenticated).

In PANOS 10.0 and above you can now configure SMTP over TLS, different destination ports and SMTP authentication - all of which you need when sending through Gmail.

Palo Alto's help page:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/configure-email-alerts.html

Gmail's help page (note step 2 - outgoing):

https://support.google.com/mail/answer/7126229?hl=en#zippy=%2Cstep-change-smtp-other-settings-in-your-email-client

Hope this helps,

Shai

Re: Test Mail getting failed

LAYER_8 — Fri, 03 Sep 2021 16:49:25 GMT

+1 to the above, my NGFWs running 10.0.6 are able to auth to smtp.gmail.com as where the NGFWs running 9.1.x are not and require internal server.