https://live.paloaltonetworks.com/t5/globalprotect-discussions/host-reachability-require-in-internal-host-detection/m-p/457683#M2280 <P>We have enabled internal host detection in GP portal with "enforce users to connect GP" option to yes. There is no internal portal and internal gateway configured.</P><P>When user walk into office GP connecting as a internal.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Deepak25_0-1641752471097.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/38550iEECCB2613188FE0B/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Deepak25_0-1641752471097.png" alt="Deepak25_0-1641752471097.png" /></span></P><P>We have set our DNS server ip in internal host detection. I was thinking about failover perspective, what if this DNS server is down due to disaster/DR drill activity , other DNS server will be there in user's LAN adapter to provide reverse DNS response for specified hostname.</P><P>But connectivity to specified hostname(in our case DNS server) is require for successful internal host detection ? or it just success only with reverse DNS lookup.</P> Sun, 09 Jan 2022 18:26:50 GMT Deepak25 2022-01-09T18:26:50Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/host-reachability-require-in-internal-host-detection/m-p/457683#M2280 <P>We have enabled internal host detection in GP portal with "enforce users to connect GP" option to yes. There is no internal portal and internal gateway configured.</P><P>When user walk into office GP connecting as a internal.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Deepak25_0-1641752471097.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/38550iEECCB2613188FE0B/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="Deepak25_0-1641752471097.png" alt="Deepak25_0-1641752471097.png" /></span></P><P>We have set our DNS server ip in internal host detection. I was thinking about failover perspective, what if this DNS server is down due to disaster/DR drill activity , other DNS server will be there in user's LAN adapter to provide reverse DNS response for specified hostname.</P><P>But connectivity to specified hostname(in our case DNS server) is require for successful internal host detection ? or it just success only with reverse DNS lookup.</P> Sun, 09 Jan 2022 18:26:50 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/host-reachability-require-in-internal-host-detection/m-p/457683#M2280 Deepak25 2022-01-09T18:26:50Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/host-reachability-require-in-internal-host-detection/m-p/458288#M2292 <P>Please see :</P> <P>&nbsp;</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClsWCAS" target="_blank">GlobalProtect not Detecting Internal Network with Internal Host... - Knowledge Base - Palo Alto Networks</A></P> <P>&nbsp;</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CluECAS" target="_blank">Most Common DNS Query Responses for Internal Host Detection - Knowledge Base - Palo Alto Networks</A></P> Wed, 12 Jan 2022 12:26:14 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/host-reachability-require-in-internal-host-detection/m-p/458288#M2292 nikoolayy1 2022-01-12T12:26:14Z