Cannot access PAN Webgui

[FarzanaMustafa]

Hello,

Recently we performed a decrypt change to allow website to bypass decryption.

Now no user can access the PAN Webgui https.

Tried in different browsers and from different machine but no change.

Connection to FW via putty session is fine. 

We have rebooted the device.

Kindly advise how to fix this issue.

[Chacko42]

Please try to connect with port 4443 - e.g. if you're using globalprotect satellite, port 443 is used for other processes

[BPry]

@FarzanaMustafa,

Are you connecting to the dedicated OOB management interface or do you have a management profile assigned to the interface to allow GUI access? 

[FarzanaMustafa]

Hi @BPry

I am trying to view last commit as that is when the issue happened and would like to try to revert back to see if that changes anything.

When you submit a change (COMMIT) and it updates those changes you made (say add in URL to allow whitelist) doesn’t it keep that as a config change? 
So if you view the list of commits you can see each change and when it occurred? Then you can pick that minor change to revert back to (attached screenshot) 

Or do you have to save each config change manually? 

[BPry · Accepted solution]

@FarzanaMustafa,

Since you can't access the GUI the following instructions will all be for the CLI. 

View Last Config

You can view the last config version by running the command show config audit version <version-number>. You can get the version number by tabing and viewing all of the versions stored on your system. 

Load Last Config

In configure mode in the CLI you can load a specific version by running the command load config version <version-number> and then doing a commit to get it back to before you made whatever change messed with the GUI access. 

[OtakarKlier]

Hello,

Also try to use a different browser. Its weird but works sometimes.

Regards,

[LeslieGomba]

I would also try running the browser in Firewall (Private) or Chrome (Incognito) mode.

Regards ... Leslie