Unable to connect to https://login.microsoftonline.com

[Kalemegdan]

hi

The whole company behind PAN firewall is unable to connect to https://login.microsoftonline.com.

no blocked page, just "sign in to your account" web portal but no place to login. Firewall does not show any blocked/dropped connection to this URL.

I create a brand new test rule, put on top of the rule sets but no luck.

Any suggestions/idea appreciated. 

[TranceforLife]

Create a test rule without any security profiles, allow any (or test PC) any, services any application also any. Test again. Still fails? 

[Kalemegdan]

Yup no luck

[TranceforLife]

Most likely this is not PA issue. Any other inline devices that could cause this? When did it happen? Only this particular website?

[Kalemegdan]

So far only this url..

[TranceforLife]

Post a screenshot please of exactly what you see. Different browser? 

[Kalemegdan]

i actually find the issue; some of the required ap[plications to get login.microsoftonline.com were disabled; 

I created a new rule to allow ms-office365, ssl, stun and web-browser to get it going..

[TranceforLife]

If this is the case why the test with application and services as any didn't  work? 

[Kalemegdan]

That was my question to PAN support - i opened a case and showed them the config logs but they were unable to figure it out 😞

[TranceforLife]

Hmm. Good to know anyway :0

[BPry]

@Kalemegdan, 

Depending on the rest of your configuration and your applicaiton time-out lengths the session you were using could have already been 'open' when you committed your test rule and it never actually checked your security policy list again for that session. It might be a good idea going forward if you haven't already when testing new policies to simply clear the session table for your specified source IP; this at least insures that your not matching a session already on the session table. 

[Kalemegdan]

Good point but i actually tested access from different workstations with the same results.

Still puzzled with the fact that i was unable to get a clear answer from support personel about "differences" in configuration.