topic Re: Global protect clientless vpn - not rewriting an database query properly in GlobalProtect Discussions

Global protect clientless vpn - not rewriting an database query properly

nleslie1970 — Thu, 21 Oct 2021 19:33:18 GMT

We have an application that we moved to the Palo's clientless vpn. When you perform a database query, the .aspx portion of the query is chopped off and you get this page isn't working. Didn't send any data. But I can see from the rewrite string that the .aspx page missing and just an empty query is left. I have a ticket open with Palo but thought I would post something here if anyone has encountered anything similar. We're on version 9.1.5. There really isn't much in the way of rewrite customization. Coming from F5 and Cisco there were some additional rewrite settings but I don't see much in the Palo except the ability to exclude certain domains.

I followed the instructions on packet capture at How to Troubleshoot GlobalProtect Clientless VPN (paloaltonetworks.com) but never could get anything captures.

Anyway, any thoughts or helpful hints would be much appreciated. thanks

Re: Global protect clientless vpn - not rewriting an database query properly

BPry — Fri, 22 Oct 2021 00:55:42 GMT

@nleslie1970,

Your pretty limited with the clienteles VPN and some applications simply don't function properly. Have you attempted to put the URL in question into the re-write exclusion?

Re: Global protect clientless vpn - not rewriting an database query properly

nleslie1970 — Fri, 22 Oct 2021 13:55:49 GMT

I put the domain in the rewrite exclusion as a test. is that what you mean? That seemed to only work if I was on the software VPN client as the application isn't accessible without a VPN.