https://live.paloaltonetworks.com/t5/globalprotect-discussions/does-enforce-users-to-connect-gp-option-works-with-internal-host/m-p/450991#M2206 <P>Internal host detection allows a GP agent to 'know' it is inside an office, and disables IPSec tunnel mode and routes traffic to the internal gateway. My customers use this specifically so they preserve user-to-IP mappings from one login. Why do you want it disabled?</P> Thu, 02 Dec 2021 16:28:47 GMT LAYER_8 2021-12-02T16:28:47Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/does-enforce-users-to-connect-gp-option-works-with-internal-host/m-p/450596#M2196 <P>We want to enforce users to connect GP when they are outside of the network. But when they use their same machine in internet network, this option should get disabled.</P><P>Can I solve this problem using internal host detection (internal GP gateway) ? If yes , there should not be ip-user-mapping by GP in internal network .</P> Wed, 01 Dec 2021 09:34:54 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/does-enforce-users-to-connect-gp-option-works-with-internal-host/m-p/450596#M2196 Deepak25 2021-12-01T09:34:54Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/does-enforce-users-to-connect-gp-option-works-with-internal-host/m-p/450991#M2206 <P>Internal host detection allows a GP agent to 'know' it is inside an office, and disables IPSec tunnel mode and routes traffic to the internal gateway. My customers use this specifically so they preserve user-to-IP mappings from one login. Why do you want it disabled?</P> Thu, 02 Dec 2021 16:28:47 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/does-enforce-users-to-connect-gp-option-works-with-internal-host/m-p/450991#M2206 LAYER_8 2021-12-02T16:28:47Z