Public IP not accessible from internal addresses.

[amansour]

Hey All;  When setting up GP and other external interfaces for access I found that any NAT inbound is not accessible when in the local network as well, only from outside. 

Can anyone explain if there is a NAT or GP gateway setting that will take internal users to the outside IP without failing.  It is much easier to test setting up the firewalls when this is permitted.

[craymond]

You need to set up a u-turn NAT policy:

See - https://live.paloaltonetworks.com/docs/DOC-1678

[amansour]

Yes, sorry, if using a PBF rule as well for redundancy.

[Abs · Accepted solution]

Negate the external network you are trying to reach with your U-turn NAT from the PBF policy.

Alex