I have the following setup: A VM100 that has multiple VLANs, for example LAN, Guest and DMZ. In the DMZ are some https websites, hosted on VM's on the same VM server as the M-100. Everything is working as expected, so internet, DHCP, DNS etc. is all working fine. However, when connected to the LAN, surfing to a https website in the DMZ results in: Secure Connection Failed An error occurred during a connection to 10.0.0.49:8000. SSL received a record with an incorrect Message Authentication Code. (Error code: ssl_error_bad_mac_read) I have this from both the LAN and the DMZ, and all https sites in my DMZ. When I put my PC in the DMZ, the sites work, so the PA is the problem. More info: Eth1: Internet Eth2: LAN Eth3.4=DMZ Eth3.5=Guest tested in PANOS 5.0.5 and 5.0.6, same issue The PA has valid licenses. No drops in the monitor. Tested with different browsers No SSL decryption policy at all First tried with all port groups in promisc allow mode, same issue. Took PA mac addresses and manually entered them on the VM interfaces (took into account that the first interface is the mgmt port)., same issue. Turned promisc off on all port groups, same issue. Kind regards, Bob
... View more