Clientless VPN inpection

sbhingarde — Thu, 17 Aug 2023 04:40:39 GMT

Hi, Can we do decryption for Clientless VPN traffic? If no, how is the traffic inspected? This is in regards to BYOD.

Re: Clientless VPN inpection

TomYoung — Thu, 17 Aug 2023 12:53:16 GMT

The NGFW already decrypts Clientless VPN because it is the tunnel endpoint. If you look in Monitor > Logs > Traffic, you can filter on the destination IP address that matches the Application URL of one of your Clientless Apps. You will see that the application is web-browsing because it is being decrypted. In my case, the traffic matches the intrazone-default rule. As long as you have security profiles applied to the rule, then you are performing Content-ID on the traffic.

Thanks,

Tom

topic Re: Clientless VPN inpection in GlobalProtect Discussions

Clientless VPN inpection

Re: Clientless VPN inpection