The PA-3000 Series manages network traffic flows using dedicated processing and memory for networking, security, threat prevention and management. The Palo Alto Networks™ PA-3000 Series is comprised of three high performance platforms, the PA-3060, the PA-3050 and the PA-3020, which are targeted at high speed Internet gateway deployments.

Prisma Secure Access Service Edge (SASE).Cloud Delivered Networking and Security.PANW - Press Releases & Public Statements.Somehow it feels like the server don't get hit with any traffic, the tcpdump would have shown that right? I would also like to add that I have a different web server up and running with the only difference being the ports 80 and 443 instead of 22, and that is accessible from the outside.Īny kick in the head.I mean right direction is appreciated 😁ĭo you have support related questions? Check the Support Site Company Information It feels like I have tried all possible kind of Nat/Sec rules, but I think I have them spot on as of now. If I run a tcpdump port 22 on the server (freebsd) and then initiates the sftp connection it shows nothing and the sftp client fails to connect. The traffic log shows that the traffic is incomplete and ages out. Im using FQDN because I have a dynamic public address. Security: Untrust -> VM, Destination address FQDN, service ssh, application default, allow. NAT: Untrust -> Untrust, destination address FQDN, service ssh, destination translation is the server ip and port 22. I'm using a Palo Alto 440 and my Nat and Security Policies looks like this. Like the title says I am having some problems connecting to a server on my local lan with sftp from outside my network.

Palo firewall