Policy-deny in Paloalto Firewall newrule

Situation: The client following this how to to create a new rule: Configure a policy for DMZ accessing Trust. However, it doesn’t work and PA firewall Monitor shows policy deny.

Troubleshooting: From the policy status we can see the new policy is grayed out meaning it is disabled. For example # 25 DMZ 172.16.80.3 port 5721.

Click Enable and commit that fixes the problem.

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com

Leave a Reply