topic DNS and global protect in GlobalProtect Discussions

DNS and global protect

C_Neal — Wed, 11 May 2022 20:10:07 GMT

I have a situation where global protect clients are dished out a DHCP address from the firewall but need an on-prem PTR created when they connect. does anyone have a good way to do this ?

Re: DNS and global protect

BPry — Thu, 12 May 2022 01:50:14 GMT

@C_Neal,

This can definitely be done by the client and not the firewall. As long as you have a domain environment, the clients update their own PTR records and the DHCP server itself doesn't need to be involved. Have you verified that your Windows guys have actually added the VPN DHCP pool(s) in the forward lookup zone and reverse lookup zones?

Re: DNS and global protect

C_Neal — Mon, 16 May 2022 13:51:47 GMT

the pools were there.. we adjusted a GPO to force the ptr creation and now it's good. Thank you!!!