Palo Alto VM No Internet in Browser

[hamzabenhamani]

Hello,

I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.
from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?

Thanks.

[nikoolayy1]

Did you do any policy trace as you may have allowed just the icmp and not web-browsing  or SSL (if you don't do decryption Palo Alto will see most applications as just SSL)?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla1CAC

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQSCA0

[hamzabenhamani]

Thanks for your reply, i allowed all services not only icmp.

[nikoolayy1]

You may also do policy trace for the NAT and check if you are using SSL decryption as if it is not configured corectly you may see issues. I suggest also doing pcap capture at drop and transmit stage as to see if the firewall is droping the traffic or not transmitting it as it could be GNS3 issue. I have made an article in live palo alto for such checks if the issue really is because of the firewall:

https://live.paloaltonetworks.com/t5/general-topics/palo-alto-checking-for-drops-slowness-and-counte...