- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
02-11-2015 09:33 AM
Hello.
I have a PA500 with firmware 6.0.7
In the Monitor menu - URL Filtering, I can see that the site is allowed, but the computer can not see. Connected directly to a modem see the page if it is working.
How can I solve this problem?
Thank you very much.
02-11-2015 10:56 AM
Hello emoralesaemoralesaemoralesaemoralesa,
It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details
admin@DADA> show session all filter destination 201.116.131.108
--------------------------------------------------------------------------------
ID Application State Type Flag Src[Sport]/Zone/Proto (translated IP[Port])
Vsys Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
21650 undecided ACTIVE FLOW NS 192.168.2.10[62729]/Trust-LAN/6 (154.32.21.11[16039])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
21651 undecided ACTIVE FLOW NS 192.168.2.10[62730]/Trust-LAN/6 (154.32.21.11[5062])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
21652 undecided ACTIVE FLOW NS 192.168.2.10[62731]/Trust-LAN/6 (154.32.21.11[15647])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
admin@DADA> show session id 21650
Session 21650
c2s flow:
source: 192.168.2.10 [Trust-LAN]
dst: 201.116.131.108
proto: 6
sport: 62729 dport: 80
state: INIT type: FLOW
srcuser: unknown
dstuser: unknown
s2c flow:
source: 201.116.131.108 [Untrust-ISP]
dst: 154.32.21.11
proto: 6
sport: 80 dport: 16039
state: INIT type: FLOW
srcuser: unknown
dstuser: unknown
starttime :Wed Feb 11 12:43:47 2015
timeout :5sec
totalbytecount(c2s) :132
totalbytecount(s2c) :0
layer7 packet count(c2s) :2
layer7 packet count(s2c) :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server
Please contact with the website provider, issue is on their side.
Hope this helps.
Thanks
02-11-2015 09:50 AM
Are you facing this problem with only one website or for all sites..? Could you please try to browse through IP address http://201.116.131.108
Could you please try to ping from your laptop to a public IP 4.2.2.2 and see the result.
Thanks
02-11-2015 10:18 AM
Hello, Hulk.
It is only with this website. The other web pages go without problem.
Thank you very much for your answer.
02-11-2015 10:56 AM
Hello emoralesaemoralesaemoralesaemoralesa,
It seems the problem is on the server side. I have tried from my laptop through a PAN firewall and it also not opening with FQDN and IP address both. It shows the no packet received from server-to-client flow. See below details
admin@DADA> show session all filter destination 201.116.131.108
--------------------------------------------------------------------------------
ID Application State Type Flag Src[Sport]/Zone/Proto (translated IP[Port])
Vsys Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
21650 undecided ACTIVE FLOW NS 192.168.2.10[62729]/Trust-LAN/6 (154.32.21.11[16039])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
21651 undecided ACTIVE FLOW NS 192.168.2.10[62730]/Trust-LAN/6 (154.32.21.11[5062])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
21652 undecided ACTIVE FLOW NS 192.168.2.10[62731]/Trust-LAN/6 (154.32.21.11[15647])
vsys1 201.116.131.108[80]/Untrust-ISP (201.116.131.108[80])
admin@DADA> show session id 21650
Session 21650
c2s flow:
source: 192.168.2.10 [Trust-LAN]
dst: 201.116.131.108
proto: 6
sport: 62729 dport: 80
state: INIT type: FLOW
srcuser: unknown
dstuser: unknown
s2c flow:
source: 201.116.131.108 [Untrust-ISP]
dst: 154.32.21.11
proto: 6
sport: 80 dport: 16039
state: INIT type: FLOW
srcuser: unknown
dstuser: unknown
starttime :Wed Feb 11 12:43:47 2015
timeout :5sec
totalbytecount(c2s) :132
totalbytecount(s2c) :0
layer7 packet count(c2s) :2
layer7 packet count(s2c) :0 >>>>>>>>>>>>>>>>>>>>>>>> no packet received from the server
Please contact with the website provider, issue is on their side.
Hope this helps.
Thanks
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!