topic Re: Global Protect not working MacOS with Xfinity in GlobalProtect Discussions

Global Protect not working MacOS with Xfinity

IamgROOT — Fri, 08 Dec 2023 16:49:24 GMT

Hello,

I have a few users who have MacOS where GP works everywhere else except on their home Xfinity network, including me on my own Mac when I didn't believe them at first. From what I can tell from the small amount of users, it only affects newer Mac's running Ventura or Sonoma. I have tried 2 different versions of GP clients, 5.2.x (Ventura) and 6.1.x(Ventura and Sonoma). The client says connected but users are unable to connect to any resources through the VPN. I tried looking at debug/dump logs but ill admit I am not sure what I need to be looking at exactly to identify why this only occurs on Xfinity home networks.

I tried changing the MTU, using a new version of the client, making sure there were no other VPN's, and Xfinity Advanced security was turned off.

Any Help Appreciated.

Re: Global Protect not working MacOS with Xfinity

reaper — Tue, 12 Dec 2023 09:42:30 GMT

have you been able to capture traffic on both sides?

is xfinity (sorry we dont have xfinity here) on IPv6 by any chance? I had an issue with a local provider that put users on ipv6 and then NAT64'd them breaking out to the internet

have you tried putting those users on an ssl only profile to see if that changed anything?

Re: Global Protect not working MacOS with Xfinity

IamgROOT — Wed, 10 Jan 2024 08:23:47 GMT

I figured out the problem, but will post a different request for a solution. Essentially, the VPN and the xfinity home network are both using the same subnet. MacOS X is using the default gateway because of the same subnet. The easy solution was to change my gateway IP, which worked. The problem now is that is not convenient for troubleshooting users who cannot just go and change their home network gateway IP. There must be a way to have Mac's auto default to the VPN's gateway when identifying resources, like how Windows devices do.