Situation: The client following this how to to create a new rule: Configure a policy for DMZ accessing Trust. However, it doesn’t work and PA firewall Monitor shows policy deny.

Troubleshooting: From the policy status we can see the new policy is grayed out meaning it is disabled. For example # 25 DMZ 172.16.80.3 port 5721.

Click Enable and commit that fixes the problem.