topic Global Protect VPN client blocks internet connection in GlobalProtect Discussions

Global Protect VPN client blocks internet connection

ruben.henares — Mon, 22 Jul 2024 12:37:31 GMT

Hello,

I work for a company that works with Global Protect VPN client, and when we connect to the VPN, internet connection get loss and can't get access to any kind of internet unless to their systems. I guess they have configured it for their security reasons or maybe for don't sent internet traffic to their network infraestructure, but are there any configuration that could le me sent all that traffic to my gateway at the same time that I am connected to their VPN via Global Protect?

Thank you

Re: Global Protect VPN client blocks internet connection

emr_1 — Tue, 23 Jul 2024 07:44:24 GMT

Sounds your company configured globalprotect setting with "no split tunnel"

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oM3WCAU

This will let your all traffics goes through the tunnel.

Then when handling by security rule on the firewall , from <tunnel zone> to <internet zone> rule denies it (by default).

Admin can allow this traffic if he/she configured it.

Re: Global Protect VPN client blocks internet connection

reaper — Tue, 23 Jul 2024 07:56:34 GMT

The company that provides you globalprotect access determines the policy that is applied.

You could request they set up a profile specific for your use case (external consultant?) to use split-tunneling so only connections to the resources you need are put onto the tunnel and everything else is routed locally

This may be their policy however, in which case, you could for example set up a local VM on your machine and run the vpn from inside the VM, which won't block your actual user space from connecting to the internet