About WilliamD

I am trying to get a basic url filtering profile setup.   I have cloned the existing default listing I have applied the clone to my outbound policy   Nothing is being blocked, I can get everywhere! My troubleshooting has then led me to the 'show url-cloud status' CLI command but this returns nothing, it simply appears to timeout after 20-30 seconds with no output.   My guess is something has fallen over but not sure what my options are other than restarting the device.  Anything I can do without losing connectivity? ... View more

Configuring a new PA-850, new to this so go easy on me.   I have three zones, internal, outside, DMZ.   DMZ webserver Private IP = 192.168.2.16 Public IP = 212.12.34.56   I have created two NAT rules as follows:   internal u-turn to DMZ source zone = internal dest zone = outside dest address = 212.12.34.56 dest translated address = 192.168.2.16   external to DMZ source zone = any dest one = outside dest address = 212.12.34.56 dest translated address = 192.168.2.16   For purposes of testing this is working I have created a security rule of ANY ANY.   I can only view the webserver from the internal network using the internal IP address of 192.168.2.16, using the FQDN or public IP I only get timeouts.  Wireshark on the internal clients show outbound HTTP but Wireshark on the server shows no traffic inbound except when using 192.168.2.16.   The u-turn NAT rule is above the public NAT rule and the hide-NAT rule is last in the list.  I am sure I am missing something simple but I have been through the how to u-turn video and guide here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEiCAK   The only thing I can see is there is also some source translation in the video which is not shown in the document but I think that is a red herring.   Any ideas? ... View more