I can not access a website

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

I can not access a website

L2 Linker

Hello.

I have a PA500 with firmware 6.0.7

In the Monitor menu - URL Filtering, I can see that the site is allowed, but the computer can not see. Connected directly to a modem see the page if it is working.

How can I solve this problem?

Thank you very much.

scjn.pngscjn-url.bmp

1 accepted solution

Accepted Solutions

Hello emoralesaemoralesaemoralesaemoralesa,

It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details Smiley Happy

admin@DADA> show session all filter destination 201.116.131.108

--------------------------------------------------------------------------------

ID          Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[Port])

Vsys                                        Dst[Dport]/Zone (translated IP[Port])

--------------------------------------------------------------------------------

21650        undecided      ACTIVE  FLOW  NS   192.168.2.10[62729]/Trust-LAN/6  (154.32.21.11[16039])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21651        undecided      ACTIVE  FLOW  NS   192.168.2.10[62730]/Trust-LAN/6  (154.32.21.11[5062])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21652        undecided      ACTIVE  FLOW  NS   192.168.2.10[62731]/Trust-LAN/6  (154.32.21.11[15647])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

admin@DADA> show session id 21650

Session           21650

      c2s flow:

              source:      192.168.2.10 [Trust-LAN]

              dst:         201.116.131.108

              proto:       6

              sport:       62729         dport:      80

              state:       INIT            type:       FLOW

              srcuser:    unknown

               dstuser:    unknown

        s2c flow:

              source:      201.116.131.108 [Untrust-ISP]

               dst:             154.32.21.11

               proto:       6

              sport:       80             dport:      16039

              state:       INIT            type:       FLOW

              srcuser:    unknown

              dstuser:    unknown

      starttime                   :Wed Feb 11 12:43:47 2015

      timeout                      :5sec

      totalbytecount(c2s)        :132

      totalbytecount(s2c)        :0

        layer7 packet count(c2s)     :2

        layer7 packet count(s2c)     :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server

Please contact with the website provider, issue is on their side.

Hope this helps.

Thanks

View solution in original post

3 REPLIES 3

L7 Applicator

Are you facing this problem with only one website or for all sites..? Could you please try to browse through IP address http://201.116.131.108

Could you please try to ping from your laptop to a public IP 4.2.2.2 and see the result.

Thanks

Hello, Hulk.

It is only with this website. The other web pages go without problem.

Thank you very much for your answer.

scjn.jpg

Hello emoralesaemoralesaemoralesaemoralesa,

It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details Smiley Happy

admin@DADA> show session all filter destination 201.116.131.108

--------------------------------------------------------------------------------

ID          Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[Port])

Vsys                                        Dst[Dport]/Zone (translated IP[Port])

--------------------------------------------------------------------------------

21650        undecided      ACTIVE  FLOW  NS   192.168.2.10[62729]/Trust-LAN/6  (154.32.21.11[16039])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21651        undecided      ACTIVE  FLOW  NS   192.168.2.10[62730]/Trust-LAN/6  (154.32.21.11[5062])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21652        undecided      ACTIVE  FLOW  NS   192.168.2.10[62731]/Trust-LAN/6  (154.32.21.11[15647])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

admin@DADA> show session id 21650

Session           21650

      c2s flow:

              source:      192.168.2.10 [Trust-LAN]

              dst:         201.116.131.108

              proto:       6

              sport:       62729         dport:      80

              state:       INIT            type:       FLOW

              srcuser:    unknown

               dstuser:    unknown

        s2c flow:

              source:      201.116.131.108 [Untrust-ISP]

               dst:             154.32.21.11

               proto:       6

              sport:       80             dport:      16039

              state:       INIT            type:       FLOW

              srcuser:    unknown

              dstuser:    unknown

      starttime                   :Wed Feb 11 12:43:47 2015

      timeout                      :5sec

      totalbytecount(c2s)        :132

      totalbytecount(s2c)        :0

        layer7 packet count(c2s)     :2

        layer7 packet count(s2c)     :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server

Please contact with the website provider, issue is on their side.

Hope this helps.

Thanks

  • 1 accepted solution
  • 3171 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!