My problem was fixed by adding a service route under device, service tab and then clicking add service route. In this section I had to add info specifying that the PA use internal interface to reach my web server rather than the management IP. This was pretty easy and it worked immediately after the commit. Thanks to everyone who responded.
... View more