PA3250 cant ping external interface public ip from internal ip but can ping any other ip

[pkathiria]

Hi there,

I can ping any other ip even though internet is working fine but when i tried to ping External public interface ip from internal  its not rechable.

there is a internal to internet policy allowing ping and any other application.

Thanks

[Remo]

Did you add an interface management profile to the external interface?

--> https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/configure-interfaces/use-interf...

[pkathiria]

Yes, I added an interface management profile to the externral interface. if i removed the profile do you think it will reslove the issue?

[OtakarKlier]

Hello,

No it would not. the profile needs to have the ping option checked:

[pkathiria]

I've already ping checked in the profile without Permitted IP Address.

[OtakarKlier]

Hello,

Are you trying to ping that interface from 'inside' the network or from a true external source such as a website that performs test pings?

Please advise,

[pkathiria]

I am trying to ping it from inside interface private IP  to external public IP 

[OtakarKlier]

Hello,

I would then make sure you have a u-turn NAT configured.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEiCAK

Cisco calls it a hairpin. 

Regards,