I've enclosed a picture showing my setup. In the situation described in the picture, pings sent from 18.104.22.168 to 22.214.171.124 time out. All other pings from 126.96.36.199 to other addresses in subnet 188.8.131.52/22 succeed. If the virtual wire is bypassed, 184.108.40.206 can ping also 220.127.116.11. My intention was to use 18.104.22.168 as a gateway for an SSL-VPN. I have found a work-around, so I can survive even with this strange behaviour of the PA-4020. Before submitting a case, I would like to know if my planned setup was wrong.
... View more