topic Re: Emails sending from PA are not working in General Topics

Emails sending from PA are not working

Vijaygvasan — Sat, 09 Oct 2021 12:26:47 GMT

Currently we are facing an issue with Emails which are not sent from palo alto firewall.

We have created a setting to send mail with reports but we are getting below error listed.

Connection to smtp.google.com 465 failed. Failure when receiving data from the peer

Please share any document related to this error and a recommendation for this.

Cheers.

Re: Emails sending from PA are not working

BPry — Sun, 10 Oct 2021 02:54:13 GMT

@Vijaygvasan,

Generally speaking this simply means that your traffic is failing to send properly. Have you looking through your traffic logs or performed a packet capture to actually see if your allowing the traffic and your actually getting return traffic from Google?

Re: Emails sending from PA are not working

Vijaygvasan — Tue, 12 Oct 2021 09:57:30 GMT

Can you share any related document for this to check.

Cheers

Re: Emails sending from PA are not working

Vijaygvasan — Tue, 12 Oct 2021 11:37:21 GMT

We have Gsuite with which palo alto need to communicate and the mail needs to recepient mail id.

I have checked with service route and changed the service route to internet line from management line for tshoot purpose.

I have tried both 25 and 465 in 10.0.1 panos yet no luck.

In traffic log 465 traffic are getting as incomplete yet the action was allow.

I have configured under device---> service profile --->email with smtp.gmail.com with port as 465 with no certificate profile---- Is it mandatory to provide a certificate profile?

I have given both username and password.

Please confirm me whether i need to configure the 15th and 16th step from this document--- https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/configure-email-alerts to get mail on my mailbox

Cheers

Re: Emails sending from PA are not working

BPry — Wed, 13 Oct 2021 03:36:06 GMT

@Vijaygvasan,

G-Suite accounts are different and I don't think smtp.google.com actually works these accounts. I believe that to set this up with a G-Suite account you'll want to go through and configure smtp relay services and use the smtp-relay.gmail.com.

Personally I would highly recommend setting up a relay and something like PostFix internally to relay those messages locally through to Gmail.

As for your question regarding step 15 and 16, without setting up one or the either you'll never get any emails from your firewall. It's a good idea to configure both to meet best practices, but you could also just use this email profile for scheduled reports, so again whether or not you configure those steps is up to you.