Global Protect - Flagging security issues with Insurance companies

DMCInsurance — Thu, 31 Mar 2022 14:05:06 GMT

I have several clients that are getting push back from their Cyber Security companies about the following issues (or non Issues). We have one company refusing to renew because of it and its coming up more often. I have a ticket open with support which I have been waiting forever to hear back. How do I force a login requirement? I know it used to be by design. I am running 10.4.-h4 on all the firewalls.

The first one is for the client download page. I have one firewall that's not prompting for a login when you go to the URL but just redirects to the download page.

The insurance company insists the port 80 redirects and being able to reach the download page is an issue.

XXX.XXX.XXX.XXX:443
Path: https://XXX.XXX.XXX:443/global-protect/login.esp (the
XXX.XXX.XXX.XXX:80
Path: https://XXX.XXX,XXX.XXX/sslmgr I know this was an issue in version 8.0 but resolved. I believe this is necessary for VPN inbound.

Has anyone been dealing with this and found a solution to shut these insurance companies up? Its becoming a monthly fight.

topic Global Protect - Flagging security issues with Insurance companies in GlobalProtect Discussions

Global Protect - Flagging security issues with Insurance companies