Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma Access Insights
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About lschs-s
About lschs-s
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
05-03-2019
11Posts
0Likes
1Solution
May 03, 2019Last Visited
User
Activity
User
Profile
Latest posts by lschs-s
| Subject | Views | Posted |
|---|---|---|
| 4009 | 04-04-2019 11:29 AM | |
| 2172 | 04-04-2019 08:14 AM | |
| 2183 | 04-03-2019 04:07 PM | |
| 2188 | 04-03-2019 02:49 PM | |
| 2199 | 04-03-2019 01:44 PM |
User Badges
Public Statistics
| Date Registered | 04-02-2019 07:48 PM |
| Date Last Visited | 05-03-2019 08:46 AM |
| Total Messages Posted | 11 |
04-04-2019
11:29 AM
Thank you so much for the help, but I fixed it all! It was some issues with subnetting and a few with routing, but worked them all out. I would go in detail, but it was in no way related to nat or security.
... View more
04-04-2019
08:14 AM
Did the test as you recomended, disabled LACP and did a direct L3 on the Palo Alto to my laptop. No client packets or pings from source 67.107.166.142 made it outbound. Its like the firewall isnt routing or has some setting blocking it from talking.
... View more
04-03-2019
04:07 PM
Yes and on both routers both links are active and LACP established the bond. Like I said, the issue was happening before the AE, so I doubt it has any influence on my issues here.
... View more
04-03-2019
02:49 PM
In regards to the dual link, in simplest terms, yes. However, in reality we own a /28 range and have a central router for just this range. From that router we have 2 links to a firewall plugged in for production networks, and another 2 links to the palo alto. Both of these firewalls have different public IPs. As for the laptop, I will try that tommorow as currently I am out of the office. I have remote access to test other ideas, but as for physcial changes, I can not work on those now.
... View more
04-03-2019
01:44 PM
Ping is not disabled, and ARP is incomplete on resolving. I recall seeing in either recieve or drop packet captures, ARP packets defining what the next hop's MAC was. Also another thing to note is my interface is a eth channel, but this issue was happening before as well.
... View more
04-03-2019
01:40 PM
Also, yes, egress is correct.
... View more
04-03-2019
01:34 PM
Ill hold off on the CLI commands just so I can confirm with you, next hop is not reachable from the palo alto even when running "ping source <pub ip on extern zone> host <next hop ip>"
... View more
04-03-2019
11:49 AM
Src Internal Src External
... View more
04-03-2019
11:26 AM
They dont match mine, but they match intrazone which should let them through, right? Or due to intrazone being intra would it block it from finishing session with the external host? Also sorry, but the results are the same internally as well.
... View more
04-03-2019
11:11 AM
I am aware of how to ping, but its just not working. I enabled logging oneven more of the security policies and saw what I have seen before in the traffic tab. Connections seem to never complete and they always age out and application is left incomplete. I am unsure of where to go from here as this issue has left me quite confused. Whether it is an issue with NAT, Security, or some other rule, I need some help sorting this out. Edit: Removed network's public IP and replaced it with a red square.
... View more
04-02-2019
07:57 PM
I have tried a lot, and at this point I think I just must be missing something obvious that for whatever reason wont come to mind. From the PA3050 I can not ping outbound from the public IP. When I run captures, all outbound traffic is in dropped stage. There is no network functionality at all, and I am unable to find the issue. Security Config NAT Config
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
05-03-2019
08:46 AM
|
Latest Tags
No tags yet
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
