I’m facing an issue with L3 int which is configured on Palo Alto firewall

[Hassan958]

Hi Team,

I’m encountering an issue with Poly devices on VLAN 20, which is routed through the firewall with its L3 interface configured. The devices successfully pair at first time with Teams but  after a reboot they fail to maintain pairing afterward, despite having a rule that allows all traffic from the VLAN 20 .

Interestingly, when these devices are moved to VLAN 10 (behind the core), they work without any issues.

Note: They are not losing any Hardware connectivity and working fine on same port with Vlan 10 which is behind the core switch 

Has anyone faced a similar issue or have any recommendations? Your input would be greatly appreciated.

[Brandon_Wertz]

---

@Hassan958 wrote:

Hi Team,

I’m encountering an issue with Poly devices on VLAN 20, which is routed through the firewall with its L3 interface configured. The devices successfully pair at first time with Teams but  after a reboot they fail to maintain pairing afterward, despite having a rule that allows all traffic from the VLAN 20 .

Interestingly, when these devices are moved to VLAN 10 (behind the core), they work without any issues.

Note: They are not losing any Hardware connectivity and working fine on same port with Vlan 10 which is behind the core switch 

Has anyone faced a similar issue or have any recommendations? Your input would be greatly appreciated.

---

What do the traffic logs show for traffic on this VLAN?

[OtakarKlier]

Hello,

Check the unified logs to see what is getting blocked.

Regards,

[Hassan958]

I can see traffic from that VLAN, and everything is set to allow only.

[Hassan958]

No deny logs so far

[OtakarKlier]

Hello,

Since its Teams, check your outbound policies to make sure that all traffic is allowed to O365. I use External Dynamic Lists in my policies to make this more dynamic for me. Just make sure to choose the correct lists.

https://saasedl.paloaltonetworks.com/feeds/

Regards,