Website unreachable

[Muhammad_Fitri]

hi my customer got an issue regarding palo alto.

This issue happens this
morning, no changes was done beforehand. The website was still accessible
yesterday until this morning.
 
We have done a few testings
as per below.
 
Office LAN users – Not
accessible

Bypass website’s Public IP
– Not accessible

Bypass website URL – Not
accessible

Wi-Fi users – Accessible

Personal hotspot –
Accessible
 
The impacted users are at the segment of 192.168.30.0/24. Why this happen ya ?

[Raido_Rattameister]

What URL and traffic log show from user towards website url/ip?

[tonacoecarvalho.adv]

Hi,

Classic overnight PAN-DB recategorization, site got tagged high-risk / newly-registered / whatever and hit your block rule. Wi-Fi & hotspot work because they bypass the firewall.

Quick checks on firewall CLI:
  texttest url example.com
    request url-filtering debug host example.com

Check Traffic logs:
source 192.168.30.0/24 + url contains "example.com" → note the rule name and action (block/deny).

Fast fix:

Objects > Custom URL Category > New
Name: Allow-ExampleSite
Add: *.example.com
In the blocking rule (or new rule above it):
Source: 192.168.30.0/24
Destination: Allow-ExampleSite
Action: allow

Or temp allow by public IP if static.
For permanent: submit recategorization at https://urlfiltering.paloaltonetworks.com.

Paste the test url output + blocking rule name here and I’ll give you the exact config lines to commit.

Fixed?