topic Client VPN Traffic in GlobalProtect Discussions

Client VPN Traffic

CraigAddison — Wed, 20 Jul 2022 06:00:25 GMT

Hi,

For security reasons, I need to ensure that all client VPN traffic is going down the VPN to the Palo Alto firewall.

I need to prove that to the customer that all traffic from the mobile devices is all going down the VPN tunnel and egressing out of the firewall.

How can I achieve this?

Thank you.

Re: Client VPN Traffic

BPry — Thu, 21 Jul 2022 22:46:39 GMT

@CraigAddison,

Take a packet capture of the mobile device and verify that the only traffic from that device is destined to GlobalProtect IPs and nothing else. I'm gonna warn you now though, not all traffic from an Android or iOS device is actually going to use that tunnel even if it's setup as a full tunnel. There's system process that bypass the VPN connection and just don't use it and won't ever use it regardless of what you do.