Having issues with GoDaddy redirect sites from IP 184.168.131.241

[nexusjedi]

Is anyone having issues behind your Palos accessing any websites the use Godaddy's IP 184.168.131.241 as a redirect?  Website example

http://www.rootworkers.com/

http://sccforme.com

We are experiencing incomplete connections. I also have a SonicWall and it is also not letting me access any site that redirects from that IP address.

[MP18]

@nexusjedi 

I tested from My PA same thing bytes sent but no traffic coming back.

I see SYN packet going from my PC but no syn ack from server.

Please check with Vendor.

Regards

[nexusjedi]

That is the thing.  If you have a smartphone try to access the site without your work WIFI.  It will work. Access behind non NextGen Firewalls work. So if you have a Linksys or something like that all these websites work. Not behind a PA or Sonicwall. In my SonicWall packets I see invalid sequence numbers.  

[CTurnbull · Accepted solution]

I'm just going to leave this here because we also ran into this issue with GoDaddy infrastructure. 

We've followed the settings change from this Palo KB related to the issue, "Firewall dropping RST from Client after Server's "Challenge ACK" preventing client from establishing TCP connections to server."

>configure
#set deviceconfig setting tcp allow-challenge-ack yes
#commit
#exit
>

We're now able to reach the GoDaddy redirection IP address.