This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About 000000
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About 000000
11-14-2018
4Posts
0Likes
1Solution
Nov 14, 2018Last Visited
User
Activity
User
Profile
Latest posts by 000000
| Subject | Views | Posted |
|---|---|---|
| 1413 | 10-30-2018 10:14 AM | |
| 1427 | 10-29-2018 10:13 AM | |
| 2001 | 09-20-2018 04:32 AM | |
| 2030 | 09-18-2018 02:07 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-18-2018 01:15 PM |
| Date Last Visited | 11-14-2018 07:35 PM |
| Posts | 4 |
10-30-2018
10:14 AM
It's now resolved. It turns out that firewall rule was missing. (I wasn't the one who did the initial implementation) I've thought it's a lot more complex nitty-gritty, but in the end it all comes to firewall rule.
... View more
10-29-2018
10:13 AM
Hello Community, I need to allow traffic to come down the VPN tunnel rather than the Split Tunnel. I have addred a VPN tunnel inclusion rule on the GlobalProtect Gateways as described in this article: https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/globalprotect-features/split-tunnel-to-exclude-by-access-route The logs shows that one of the destination is "allow" with aged-out, the second is dropped. To me it seems like some routing issue, but I just don't know why this is dropped by the firewall since there is inclusion? I am sure I am missing something ... Thanks!
... View more
09-20-2018
04:32 AM
Indeed, it was found that there is a NAT which causes the reply from the firewall. The traffic in question only returns through the firewall and hits NAT rule on it's way back. However that traffic does not go through the firewall on it's way out. ICMP is not affected by it, but any TCP will be dropped because breaks the 3-way handshake.
... View more
09-18-2018
02:07 PM
Hello everybody, What could cause ping to respond from a different IP? When tested from source, the response message of the ping command is successful and it's coming from the PaloAlto firewall, not from the destination IP. Where and how can I verify on the PaloAlto if this is expected or not? What setup can cause such behavior on the PaloAlto? Need to mention that the destination is RPC server to which the source can't connect, even though there is sucessful ICMP reply from the PaloAlto firewall. Source and destinaiton are on different networks. Thanks!
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks