topic Re: GlobalProtect - Unable to Access the Internet in GlobalProtect Discussions

GlobalProtect - Unable to Access the Internet

CEvans16 — Tue, 11 Mar 2025 19:53:48 GMT

Hello my LIVEcommunity friends,

I have a puzzler here for you all (I'm sure I won't be the only one with this issue). I have seen similar discussions, but none quite fit the bill. I have one user that cannot access Internet-based resources (web pages or applications) while on the GlobalProtect VPN. Split-Tunneling was removed from the environment a week and a half ago. This issue was reported last week and so far, it seems isolated. The firewall logs are not showing any "aged-out"s or "deny"s.

I have attached a "route print" as well as a "tracert google.com" (www.google.com took too long to respond).

Any ideas?

Re: GlobalProtect - Unable to Access the Internet

Raido_Rattameister — Wed, 12 Mar 2025 12:45:13 GMT

So you do see sessions from this user in traffic log and that traceroute also goes through Palo?

12.17.244.2 is next hop for Palo that runs GlobalProtect?

Re: GlobalProtect - Unable to Access the Internet

CEvans16 — Wed, 12 Mar 2025 13:53:47 GMT

Hello,

I can see basic traffic from the user in the traffic logs. It is generic traffic not indicative of connection attempts. 12.17.244.2 is, I believe, the next hop in GlobalProtect. For clarification, when attempting to access Google.com that traffic is not making it into the Panorama traffic logs.