Unable to access a few websites?
Hi all. My company has a sister company that just replaced their existing (non-PA) firewall with a PA-1410. Yay! I wasn't involved with the set-up but my company also has a PA so I'm pretty familiar with them. Definitely not an expert.
Issue: The sister company is having an issue where they cannot access a few websites (they receive a "This site can't be reached. ERR_CONNECTION_TIMED_OUT" error).
What I’ve done so far:
- Verified I’m unable to ping neither the URL nor IP address of each website from a PC there on LAN
- Nslookup on each website. Each one resolves the name/IP
- Monitor – Traffic – (addr.dst in <IP of each website>) – Apply Filter = No results
- Monitor – URL Filtering – (url contains <each URL>) – Apply Filter = No results
- Monitor – Logs – Decryption = Nothing shows (no decryption failures)
- Objects – Security Profiles – Anti-Spyware. = The two policies (Default & Strict) matches my company's PA firewall and I can access all 3 websites so don’t think this is it.
- Objects – Custom Objects – URL Category = Nothing
I'm at a loss! Is it possible that these 3 websites fall under the block category under Objects – Security Profiles – URL Filtering? But it only has the “default” and my company's PA has the “default” as well and I can access those websites so probably not that. I’m not seeing anything under Monitor so it’s like they’re not even hitting the firewall at all, but they’re not pinging which leads me to believe something firewall-related. Any suggestions or anything else to check?