Help support

[Zola12]

Dear Palo alto family,

I  face some difficulty  to  ping internet on DMZ , i am trying to configure a security policy  DMZ_to_Public/ WAN  but still i didn't ping 8.8.8.8  in DMZ switch and  didn't ping  in firewalls  itself also.

Help me to solve this issue pls 

[Arnesh]

Hi @Zola12 ,

I understand that there are 2 things which are trying to fix:

1. Ping is not working from DMZ to Internet

2. Ping not working when doing from DMZ Switch towards DMZ firewall interface.

To answer point 1, you need to make sure you have a proper security policy, NAT policy, Internet facing interface correct configuration.

Can you ping 8.8.8.8 from your firewall's Internet facing interface?

To answer point 2, if you need to ping the firewall interface, you need to enable ping on the interface.

Please refer to this KB - How to Allow Ping and ICMP on Layer 3 Interface of Your Palo Alto Networks Device

[Zola12]

Dear palo alto family,

internet is out from DMZ , the only issue is  8.8.8.8 is not pinging 

help me to share security policy and  NAT policy from DMZ to WAN if you have please 

also does public IP required to ping 8.8.8.8? 

[Arnesh]

Setting up basic security-policy and NAT policy should not be a tough task. I do not have a lab firewall handy now to show the basic rules.

Here is a youtube video which you can refer which helps with basic network connectivity.

As only the ping does not work and rest Internet access works, check if application is added to the to the rule if app-based security policy is configured.

have you checked the traffic logs (GUI > Monitor > Traffic logs) to see if the traffic is allowed or blocked?