SSL VPN DMZ access issue

[Satish]

Hi Friends,

I have configured SSL vpn with AD integration but i am not able to ping DMZ. i have all ready configure access route. please suggests what i need to do in configuration. or where i am missing.

Regards

Satish

[bat]

Hi Satish

Do you have policy from the zone (your tunnel interface is) to your DMZ zone ?

Also check if you have route for the GP pool on your intermediary devices after the packet leaves Palo Alto to the destination in DMZ.

[Satish]

Hi Bat Dud..,

I have already created policy for that but till is not working.

Thnx

Satish

[HULK]

Did you check traffic logs, in case it's getting dropped.

Thanks

[bat]

Also check if you have route for the GP pool on your intermediary devices after the packet leaves Palo Alto to the destination in DMZ.

[Satish]

Hi Hulk,

How are you ?? yes i am getting drop but rule is allow pls suggest.

Regards

Satish

[Satish]

Hi Bat,

GP pool is like 172.16.1.X or DMZ 10.10.1.X. i have configure in GP access route like 0.0.0.0/0, 10.10.1.0/X

Thanks

Satish

[HULK]

Hello Satish,

I am doing well and thank you for asking. Could you please expand the traffic logs ( monitor > logs > traffic) and share a snapshot of that logs here.

Thanks

[Satish]

Hi Hulk,

Right now, i dont have access but i will share with you tomorrow.

Satish

[HULK]

Thanks for your quick reply. Could you please also check: (tomorrow  )

--whetherthe traffic is leaving the firewall inright direction(from Monitor> traffic logs)

-- Try to ping the destination(DMZ),sourceas the PAN interface IP (connected towards DMZ).

Thanks