topic Re: Setting up VPN for MAC access in GlobalProtect Discussions

Setting up VPN for MAC access

mbritt — Thu, 08 Aug 2024 18:43:44 GMT

I have GP set up for Windows, and it works. When I use a Mac to go to the portal, it says it has moved or does not exist anymore. I have not made changes, not sure what has happened or where to go to make sure MAC will work.

Re: Setting up VPN for MAC access

aleksandar.astardzhiev — Fri, 09 Aug 2024 13:22:12 GMT

Hi @mbritt , Can you please clarify:

- Are you using Clientless VPN or connecting with GlobalProtect client?

- What do you mean by "use a Mac to go to the portal"? Are you opening the VPN address with web browser, or trying to connect with GP client?

- If you go to GP portal -> Authentication tab are using "any" for OS or have specific authentication rules for each OS?

Re: Setting up VPN for MAC access

mbritt — Sun, 11 Aug 2024 17:39:47 GMT

Use GP Client.

The portal address works randomly. Most of the time, I get an error message saying that the address cannot be reached.

The GP Authentication is set for any OS.

Re: Setting up VPN for MAC access

Edsnow — Mon, 12 Aug 2024 13:20:46 GMT

First things 1st.

to Use GP for MAC systems, you need a license, unlike windows.
try to access portal from web browser to confirm the reachability.
If that works. check with authentication part.
If you are seeing cannot be reached error then you need to verify the is there any fluctuation in the ISP.

Re: Setting up VPN for MAC access

BPry — Mon, 12 Aug 2024 13:31:07 GMT

@Edsnow,

You do not need a license to use GlobalProtect on a Mac. Windows and macOS can utilize GlobalProtect regardless of license status. The only time that you need a GlobalProtect Gateway subscription is for mobile endpoints (Android/iOS/Chrome) and Linux endpoints. The full comparison can be found HERE.

@mbritt,

If you can't reach the portal address I would be reviewing logs when you run into the issue. Once an endpoint starts seeing the inability to connect, get the public IP address of that endpoint so you can review your traffic logs for that particular IP and see how the firewall is handling the traffic.

It's possible that your security rule is dropping the traffic because of incorrect geolocation if you have it restricted, that the IP is being identified as a threat for some reason and your firewall is temporarily blocking that source address. I've also seen some connections that are using IPv6 only and don't have any sort of IPv6->IPv4 gateway capability that cause issues reaching the portal.

Also just to verify, how many macOS endpoints are we talking about here? Have you had multiple macOS endpoints run into this issue, or are we talking about a single endpoint that you're having issues with?