topic GP asking for credentials and authenticating while in the office in GlobalProtect Discussions

GP asking for credentials and authenticating while in the office

SHoumpavlis — Tue, 01 Mar 2022 21:15:10 GMT

Hello Everyone,

I have set up an internal host detection in my GP config but I am still getting notified for authentication and then the GP client connects while in the office. I can ping the internal host from the office and as well when I am connected to GP. Any ideas what might be going on?

Thanks

Re: GP asking for credentials and authenticating while in the office

Mudhireddy — Tue, 01 Mar 2022 22:11:50 GMT

Hi,

The GP portal can provide an IP address and DNS hostname as part of the information passed to the client, which the client can use to determine whether it is inside or outside the corporate network:

•The agent performs a reverse lookup on the IP address. If it receives the expected hostname as a response, the agent assumes it is on an internal network and connects to the gateways in the
internal list.

•If no response is received for the lookup, the client connects to the gateways in the external list. If an internal host detection hostname and address pair is not provided, the client connection attempts to connect to the internal gateways first, then to the external gateways.

The DNS hostname and IP address must correspond to a device whose name can be resolved only by an internal name server.

Re: GP asking for credentials and authenticating while in the office

SHoumpavlis — Tue, 01 Mar 2022 22:15:02 GMT

Thanks for that. I ended up adding a reverse lookup zone for that subnet and that resolved my issue.

Re: GP asking for credentials and authenticating while in the office

Felixcao — Tue, 08 Mar 2022 04:55:00 GMT

Hi Mudhireddy

if the firewall do not config internal gateway, when the agent performs a reverse lookup on the IP address. If it receives the expected hostname as a response, the agent assumes it is on an internal network ,then it do not connect any thing ,right ?