Test Mail getting failed

[VishnuPS]

Dear Team,

We have tried to create a email scheduler, We don't have a local SMTP server. We getting the below error,

Please find the packet flow below.

c2s flow:
                source:      10.1.1.5 [LAN]
                dst:         172.217.194.109
                proto:       6
                sport:       56175           dport:      25
                state:       INIT            type:       FLOW
                src user:    unknown
                dst user:    unknown
                ecmp id:     8000

        s2c flow:
                source:      172.217.194.109 [WAN]
                dst:         182.74.53.90
                proto:       6
                sport:       25              dport:      64050
                state:       INIT            type:       FLOW
                src user:    unknown
                dst user:    unknown

        start time                           : Thu Sep  2 14:27:23 2021
        timeout                              : 15 sec
        total byte count(c2s)                : 541
        total byte count(s2c)                : 700
        layer7 packet count(c2s)             : 7
        layer7 packet count(s2c)             : 8
        vsys                                 : vsys1
        application                          : gmail-base
        rule                                 : PaloAlto-Management-Email
        service timeout override(index)      : False
        session to be logged at end          : True
        session in session ager              : False
        session updated by HA peer           : False
        address/port translation             : source
        nat-rule                             : Outgoing_Internet-Airtel(vsys1)
        layer7 processing                    : enabled
        URL filtering enabled                : True
        URL category                         : any
        session via syn-cookies              : False
        session terminated on host           : False
        session traverses tunnel             : False
        session terminate tunnel             : False
        captive portal session               : False
        ingress interface                    : ethernet1/1
        egress interface                     : ethernet1/3
        session QoS rule                     : N/A (class 4)
      tracker stage firewall               : TCP FIN
        end-reason                           : tcp-fin

Packet flow seems good but still getting test mail error like unable to send mail via gateway smtp.gmail.com

Regards,

Vishnu

[ShaiW · Accepted solution]

Hi

What PANOS version are you running?

Please note that PAN 9.1 and below only support standard SMTP (unauthenticated).

In PANOS 10.0 and above you can now configure SMTP over TLS, different destination ports and SMTP authentication - all of which you need when sending through Gmail.

Palo Alto's help page:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/configure-email-alerts.html

Gmail's help page (note step 2 - outgoing):

https://support.google.com/mail/answer/7126229?hl=en#zippy=%2Cstep-change-smtp-other-settings-in-you...

Hope this helps,

Shai

[LAYER_8 · Accepted solution]

+1 to the above, my NGFWs running 10.0.6 are able to auth to smtp.gmail.com as where the NGFWs running 9.1.x are not and require internal server.