Palo Alto Explicit Proxy Traffic Issue

[kalpesh]

Hello Team,

We have configured the Palo Alto firewall as an Explicit Proxy using Kerberos authentication in alignment with the Admin Guide. However, we’re noticing that the designated traffic is not routing through the Proxy as expected and is failing to initiate from the Proxy-Zone to the Internet-Zone.

When attempting to access a webpage from a user’s device, we’re encountering the following error: "upstream connect error or disconnect/reset before headers, reset reason: connection failure."

Could someone provide guidance on troubleshooting this issue? Insights on potential configuration aspects or logs to review would be greatly appreciated.

Thanks