sslvpn 4.0.x issue

[panos]

Hi,

When configuring sslvpn we tried to use an Adsl modem which makes its public 1.1.1.1 NAT 443 to a local ip 172.16.2.1

this ip is PaloAlto's L3 interface.Default gateway of PaloAlto is 172.16.2.2 which is modem.

People can access to internet from PaloAlto with modem's public ip (NAT enabled on modem)

When we access to public ip of modem with https://1.1.1.1 no sslvpn page comes !

When we look to monitor I see traffic from my ip to 172.16.2.1 as ssl  allow

but no portal page comes what can this be ?

panos 4.0.10

[wesa]

Hi bulent

do you see https enabled in the management profile? when you do >show ssl-vpn flow    do you see your Portal name listed and the interface, tunnel it's associated to?

[panos]

let me check and write back

thanks for help.good to see someone for 4.0.x

[panos]

I did not enable https on interface because the document is telling do not

[VinceM]

Hi,

No need activate https on interface. Please, first thing, confirm that if you are connected directly on same subnet as you PA's outside interface, portal is OK, if not, should be a SSL issue (maybe comming from cetifiat error depending of the error message). Next step, if it's work, doing the same from outside, work => OK, doesn't, routing issue.

rgds

V.