External IP address not able to resolve internal webservers

[Farzana]

Hello,

We are unable to open page externally. is there any article to point us on this issue?

Using PAN-OS 7.1.10

No recent change/upgrade done.

All router config and NAT checked.

No issue from ISP.

Thanks in advance.

[TranceforLife]

Hi,

Are you looking for 1x1 NAT config:

Quite easy to get confused with one to one NAT 🙂

[Farzana]

Hello TranceforLife,

We are using Source Address Translation. The setup was working fine before. There are quite a few internal Servers and they talk to each other no problem. We can open web URL's internally. 

[reaper]

you'll need to add another NAT policy for untrust-untrust as @TranceforLife pointed out , the 'hosting' to 'internet' NAT policy will only take care of connections going out to the internet

check out this getting started article and tutorial video : Getting Started: Network Address Translation (NAT)

[Farzana · Accepted solution]

Thank you all for the responses. As I mentioned before that the FW was working fine with the NAT setup and suddenly the issue started. We logged a support case and found the traffic was dropped by the zone protection associated with the Internet zone - strict IP address check.

[filipefarias]

Hello Farzana,

For you to resolve this problema, did you have to disable or strick ip address or some other option?

Thank you