Services under Firewall Policy not working

1>What service did you define in the  fwpolicy?

2>Did you execute and diag debug flow to see if it was matching that fwpolicy ( by policy-id)

3>and to go along with #2, did you validate the fwpolicy sequence and ordering ?

ift38375 wrote:

 

2: this command is not showing any logs, how to perform this task 3. how can we validate Sequence and ordering

For #2, search for diag debug flow you have many filter options apply a filter to match the traffic port src or dst and review the diagnostic output. If it matches the firewall policy  than inspect the firewall policy, if it doesn't match the specific firewall policy than determine why ( routing, some other external issues )

For #3; I prefer the cli but the webgui  shows the same thing with regards to the ordering of policies

If the policy sequence is nor correct , move it around to ensure the most specific are place before a broader fwpolices.

lastly, double check for any NAT issues if  the client src is an rfc1918 addressed.

@ift38375

Also does this problem happen from all web browsers? 

And have you tried to access the website from another computer?

Any UTM features enabled on that firewall policy?

Nslookup (using www.kloth.net) reports in.pinterest.com resolves to:

 Non-authoritative answer:
 in.pinterest.com canonical name = www.pinterest.com.
 www.pinterest.com canonical name = www.pinterest.com.edgekey.net.
 www.pinterest.com.edgekey.net canonical name = e9343.a.akamaiedge.net.
 Name: e9343.a.akamaiedge.net
 Address: 172.227.88.170

You have anything in place that is blocking any of those addresses?