topic Re: DNS - Clients don't update when users return to office in GlobalProtect Discussions

DNS - Clients don't update when users return to office

LukeRath — Fri, 28 May 2021 14:29:01 GMT

Hi,

We have an issue when users return to the office the Windows DNS servers can not update the IP address to the office IP. We think its more of a Windows DNS permission issue but just wanted to check if anyone has seen this issue before.

- User on VPN get's IP from Palo via GP.

- DNS is updated in windows (owner is machine name).

- User then comes in to office and gets a new IP from Windows DHCP.

- The DHCP service account tries to update record but has no permission.

- Then we have some nice DNS issues 🙂

I have a case open but they have not seen this issue before.

Thanks

Luke

Re: DNS - Clients don't update when users return to office

Mick_Ball — Sat, 29 May 2021 07:29:04 GMT

The dhcp server settings has an advanced tab, you can set credentials in there to give permissions to update records.

Re: DNS - Clients don't update when users return to office

Remo — Mon, 31 May 2021 22:14:51 GMT

What GP version do you use? Because I think there once was a bug in global protect which prevented these DNS updates.

Re: DNS - Clients don't update when users return to office

LukeRath — Tue, 01 Jun 2021 09:33:25 GMT

Hi,

We are updating GP at the minute so we are running 3 different versions. We think the issue is to do with the below setting and we are going to carry out some testing on one scope this week.

Re: DNS - Clients don't update when users return to office

ccscott — Tue, 01 Jun 2021 18:25:38 GMT

Seems like more of a winodws issue, but I'd like to ask, how are most people actually handling ddns updates while clients are on global protect vpn? Non windows dns here.