Does PBF rule works for traffic originating from Global Protect Client

tamilvanan — Wed, 13 Oct 2021 15:10:26 GMT

Hi All,

We have two Global Protect portals/Gateways configured on each firewall ISP 1(Eth 1/1) and ISP 2(Eth 1/2) interfaces.

We had enabled ECMP on the firewall with max path 2 and configured ISP 1 and ISP 2 as default routes.

When an user is connected to GP configured on ISP 2 interface and trying to access internet the traffic from GP client is routed through ISP 1 interface.

As ECMP is configured this is an expected behaviour.

Can we use an PBF rule to route the traffic originating from end user GP Client to go through an particular interface.

In the below article it is mentioned that Global protect traffic cannot be routed using PBF policy. Is it also applicable for the traffic originating from GP client end user system.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClbDCAS#:~:text=PBF%20does%20not%20function%20for%20GlobalProtect%20connection

Thanks in advance.

Re: Does PBF rule works for traffic originating from Global Protect Client

nikoolayy1 — Sun, 17 Oct 2021 11:59:43 GMT

Play arround. You can use the option to add the VPN traffic to a specific zone for more easilly manage it with PBF:

https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/get-started/create-interfaces-and-zones-for-globalprotect.html

topic Does PBF rule works for traffic originating from Global Protect Client in GlobalProtect Discussions

Does PBF rule works for traffic originating from Global Protect Client

Re: Does PBF rule works for traffic originating from Global Protect Client