VPN-SSL through Palo Alto

[SOC_CSG]

Hi, im having problems connecting with VPN-SSL clients (Global Protect and SonicWALL VPN Client). We have a firewall Palo Alto to go to internet and i use these VPN clients for connecting to several branches but i dont know why my Palo Alto (which VPNs go through) is having a strange behaviour. I dont see any connection in the MONITOR TRAFFIC about the start session VPN-SSL from my machine to the tunnel destination.

We have another way to go to internet through a JUNIPER SSG and in this case the clients VPN are connecting correctly and everything is working.

how palo alto treats the VPN-SSL traffic which go though itself?

thanks

[HULK]

Hello COS,

Are you facing this problem from a specific machine or from all machines ( with your credentials).?

Are you able to login into the GP portal with same credentials..?

You can enable debugging into the GP client to get some more information:

Troubleshooting GlobalProtect, PAN-OS 4.1

Thanks

[SOC_CSG]

It happens in all the machines.

Since another branch in which we also go to internet through PA it happens the same. Its like Palo Alto is denying the connection or doing something but i cant see anything in the log.....

i attached the sinicwall´s log

when it works asked me for the PSK. going trough PA it doesnt reach to asked me this.

[SOC_CSG]

I attached the GP log

[SOC_CSG · Accepted solution]

the zone protection was the problem.......THANKS