topic Re: Allow traffic to specified FQDN enforce globalprotect for network acces in GlobalProtect Discussions

Allow traffic to specified FQDN enforce globalprotect for network access?

Sec101 — Wed, 01 Jul 2020 22:50:52 GMT

Has anyone tried using this? Wondering how it works, and if it is an "and" or an "or" if you specify IP's in the "allow traffic to specified IP's when enforce globaprotect for network access is enabled.

I'm trying to get users out to something simple, like bing.com and finding that even without specifying an IP address, and only specifying an FQDN, it does not appear to work.

Re: Allow traffic to specified FQDN enforce globalprotect for network acces

pbasamsett — Fri, 10 Jul 2020 18:55:40 GMT

Hi,

The specified FQDN Enforce GlobalProtect for Network Access would be supported from GP 5.2 version.

For now, we only support specified Hosts/Networks Enforce GlobalProtect for network access from GP 5.1 version.

Kindly review the article below regarding this feature for your reference:

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-released-in-gp-app/enforce-globalprotect-exclusions.html