- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
11-14-2022 10:44 PM
Hello @qmso475
thanks for post.
Could you check this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clb4CAC
If you take the permit IP address list off temporarily, are you able to access it?
Could you take packet capture on your host in your permit IP address list to see you are getting response at all?
Kind Regards
Pavel
11-15-2022 01:43 AM
Thank you for reply @qmso475
from the screen shot you provided, it looks like one side is setting up maximum segment size to 1410 Bytes and TCP Reset is coming back. Personally to narrow down the issue, I would try temporarily remove the permit list and test it again. If it works without permit list, then the issue might be broken PMTUD, source IP address of your machine does not match, NAT device in between, or else.
Kind Regards
Pavel
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!