Palo Alto VM No Internet in Browser

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Palo Alto VM No Internet in Browser

L0 Member

Hello,

I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.
from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?

Thanks.

3 REPLIES 3

L6 Presenter

Did you do any policy trace as you may have allowed just the icmp and not web-browsing  or SSL (if you don't do decryption Palo Alto will see most applications as just SSL)?

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cla1CAC

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClQSCA0

 

Thanks for your reply, i allowed all services not only icmp.

You may also do policy trace for the NAT and check if you are using SSL decryption as if it is not configured corectly you may see issues. I suggest also doing pcap capture at drop and transmit stage as to see if the firewall is droping the traffic or not transmitting it as it could be GNS3 issue. I have made an article in live palo alto for such checks if the issue really is because of the firewall:

 

 

https://live.paloaltonetworks.com/t5/general-topics/palo-alto-checking-for-drops-slowness-and-counte...

  • 3141 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!