04-06-2022 04:40 AM
I have a PA-220 (PANOS 9.1.8) running with a dynamic PPoE link to the ISP. I've tried everything! It does not respond to PING, SSH, HTTPS. I removed the firewall security profiles, zone protection, added the management profile. Looking at the pcap, the external IP keeps sending and the PA will not respond to anything. I'm at a loss. I don't even see my external laptop's public IP in the logs, even though logging is enabled. The ISP says they are not blocking anything.
04-07-2022 12:39 AM
Hi @DJ_Palo ,
Have you tried running PCAPs on the PA to confirm packets even arrive on the interface ?
Packets may be dropped before being logged. If packets arrive on the interface, check global counters for specific drops.
Cheers,
-Kiwi.
04-07-2022 04:22 AM
Hey Kiwi,
Thank you so much! You're comments lead me to the solution. I was getting LAND attacks on the interface. I had my NAT set to ANY. Appreciate your comment.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
