GlobalProtect Portal Unaccessible - New Install

[B.Patton]

Hi everyone,

First time user of Palo Alto, and really struggling here. After a ton of YouTube videos and PA documents, I've gone and created a GlobalProtect gateway and portal, which is attached to our static WAN interface (ethernet1/2). 

From outside the network, I can ping that interface (as I have the management profile enabled for ping) just fine, and devices behind the router can reach the internet. 

However, after configuring the portal and gateway, when I browse to https://WAN_IP_Ethernet1/2 from outside the network, I can't reach the portal page - it just times out. Utilizing GlobalProtect client, I get the portal is inaccessible. 

I've created a Security Policy and since this isn't production, went crazy and set it up Any Source, Any Destination, and Applications are ike, ipsec, panos-global-connect, panos-web-interface, and ssl. Still nothing. 

I would expect even if I have a cert issue, I'd at least get a website with a warning. I'm totally lost in this - never expected it to be this difficult in setup, in after all the tutorials I've been through. Am I missing something incredibly obvious?

[Edsnow · Accepted solution]

Verify the traffic logs, your are able to see the hit from your public IP.if there is no logs, just enable packet capture and verify the traffic is reaching to the firewall interface.if it is pinging verify with tnc command for port 443.

knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0

[B.Patton]

Thanks for the insight - come to find out we had a bogus NAT rule that was superseding GP traffic. Fixed the rule and now things are flowing correctly. Thanks!