https://live.paloaltonetworks.com/t5/globalprotect-discussions/endpoint-traffic-enforcement-for-vm/m-p/537401#M3863 <P>Hi everyone.</P> <P>&nbsp;</P> <P>There is "Endpoint Traffic Enforcement" feature which does not allow connection outside the Globalprotect connection, but it does not work with virtual machines on host. So, if you have a VM on host with Globalprotect and configure network adapter in bridge mode, it's traffic bypasses Globalprotect tunnel and goes directly through physical network adapter.</P> <P>&nbsp;</P> <P>Is there any way to restrict VM's network with Globalprotect on host?</P> Mon, 03 Apr 2023 08:10:28 GMT Elvin-Hajiyev 2023-04-03T08:10:28Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/endpoint-traffic-enforcement-for-vm/m-p/537401#M3863 <P>Hi everyone.</P> <P>&nbsp;</P> <P>There is "Endpoint Traffic Enforcement" feature which does not allow connection outside the Globalprotect connection, but it does not work with virtual machines on host. So, if you have a VM on host with Globalprotect and configure network adapter in bridge mode, it's traffic bypasses Globalprotect tunnel and goes directly through physical network adapter.</P> <P>&nbsp;</P> <P>Is there any way to restrict VM's network with Globalprotect on host?</P> Mon, 03 Apr 2023 08:10:28 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/endpoint-traffic-enforcement-for-vm/m-p/537401#M3863 Elvin-Hajiyev 2023-04-03T08:10:28Z