I can not access a website

Reply
Highlighted
Not applicable

I can not access a website

Hello.

I have a PA500 with firmware 6.0.7

In the Monitor menu - URL Filtering, I can see that the site is allowed, but the computer can not see. Connected directly to a modem see the page if it is working.

How can I solve this problem?

Thank you very much.

scjn.pngscjn-url.bmp

Tags (5)

Accepted Solutions
Highlighted
L7 Applicator

Hello emoralesaemoralesaemoralesaemoralesa,

It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details :smileyhappy:

admin@DADA> show session all filter destination 201.116.131.108

--------------------------------------------------------------------------------

ID          Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[Port])

Vsys                                        Dst[Dport]/Zone (translated IP[Port])

--------------------------------------------------------------------------------

21650        undecided      ACTIVE  FLOW  NS   192.168.2.10[62729]/Trust-LAN/6  (154.32.21.11[16039])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21651        undecided      ACTIVE  FLOW  NS   192.168.2.10[62730]/Trust-LAN/6  (154.32.21.11[5062])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21652        undecided      ACTIVE  FLOW  NS   192.168.2.10[62731]/Trust-LAN/6  (154.32.21.11[15647])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

admin@DADA> show session id 21650

Session           21650

      c2s flow:

              source:      192.168.2.10 [Trust-LAN]

              dst:         201.116.131.108

              proto:       6

              sport:       62729         dport:      80

              state:       INIT            type:       FLOW

              srcuser:    unknown

               dstuser:    unknown

        s2c flow:

              source:      201.116.131.108 [Untrust-ISP]

               dst:             154.32.21.11

               proto:       6

              sport:       80             dport:      16039

              state:       INIT            type:       FLOW

              srcuser:    unknown

              dstuser:    unknown

      starttime                   :Wed Feb 11 12:43:47 2015

      timeout                      :5sec

      totalbytecount(c2s)        :132

      totalbytecount(s2c)        :0

        layer7 packet count(c2s)     :2

        layer7 packet count(s2c)     :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server

Please contact with the website provider, issue is on their side.

Hope this helps.

Thanks

View solution in original post


All Replies
Highlighted
L7 Applicator

Are you facing this problem with only one website or for all sites..? Could you please try to browse through IP address http://201.116.131.108

Could you please try to ping from your laptop to a public IP 4.2.2.2 and see the result.

Thanks

Highlighted
Not applicable

Hello, Hulk.

It is only with this website. The other web pages go without problem.

Thank you very much for your answer.

scjn.jpg

Highlighted
L7 Applicator

Hello emoralesaemoralesaemoralesaemoralesa,

It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details :smileyhappy:

admin@DADA> show session all filter destination 201.116.131.108

--------------------------------------------------------------------------------

ID          Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[Port])

Vsys                                        Dst[Dport]/Zone (translated IP[Port])

--------------------------------------------------------------------------------

21650        undecided      ACTIVE  FLOW  NS   192.168.2.10[62729]/Trust-LAN/6  (154.32.21.11[16039])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21651        undecided      ACTIVE  FLOW  NS   192.168.2.10[62730]/Trust-LAN/6  (154.32.21.11[5062])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

21652        undecided      ACTIVE  FLOW  NS   192.168.2.10[62731]/Trust-LAN/6  (154.32.21.11[15647])

vsys1                                          201.116.131.108[80]/Untrust-ISP  (201.116.131.108[80])

admin@DADA> show session id 21650

Session           21650

      c2s flow:

              source:      192.168.2.10 [Trust-LAN]

              dst:         201.116.131.108

              proto:       6

              sport:       62729         dport:      80

              state:       INIT            type:       FLOW

              srcuser:    unknown

               dstuser:    unknown

        s2c flow:

              source:      201.116.131.108 [Untrust-ISP]

               dst:             154.32.21.11

               proto:       6

              sport:       80             dport:      16039

              state:       INIT            type:       FLOW

              srcuser:    unknown

              dstuser:    unknown

      starttime                   :Wed Feb 11 12:43:47 2015

      timeout                      :5sec

      totalbytecount(c2s)        :132

      totalbytecount(s2c)        :0

        layer7 packet count(c2s)     :2

        layer7 packet count(s2c)     :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server

Please contact with the website provider, issue is on their side.

Hope this helps.

Thanks

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!