topic Re: Global Protect and AXON fleet 3 Dashboard in GlobalProtect Discussions

Global Protect and AXON fleet 3 Dashboard

LukePowell — Wed, 24 Apr 2024 20:03:52 GMT

Good afternoon,

I am having trouble with connecting to this fleet 3 dashboard, with GP. It appears to be a a DNS issue, because it will find the local network when GP is disabled. The virtual adapter takes over, and uses our DNS server, so it is not on a local network at that point. I have tried changing the DNS addresses, in the adpater and in GP, and it did not fix the issue. Thanks for any help.

Luke

Re: Global Protect and AXON fleet 3 Dashboard

kiwi — Fri, 26 Apr 2024 08:05:11 GMT

Hi @LukePowell ,

Sounds like your GP is configured to not allow split tunneling and send all traffic inside the tunnel.

Ask your admin to check the GP gateway configuration at Network > GlobalProtect > Gateways > Agent > Client Settings > Split Tunnel

Hope this helps,

-Kim.

Re: Global Protect and AXON fleet 3 Dashboard

jkim12 — Tue, 08 Oct 2024 13:27:19 GMT

wanted to share that when the axon body cameras are plugged back into the laptops to upload the data, they create a new network adapter. we tried split tunneling but lack of documentation from axon and their support didn't help.

ended up doing a process based split tunnel for just for a specific user-id group that was using them with the 3 processes

axon fleet.exe, axon-agent.exe, axon evidence upload xt v2.exe

Re: Global Protect and AXON fleet 3 Dashboard

MtnV-IT — Fri, 25 Apr 2025 19:48:28 GMT

Hello,

We are currently having a conflict with the free version of Global Protect VPN shutting down Fleet 3 dashboard on dash cameras on the MDC's (Laptops), it appears to be a DNS issue. This issue started after we did an update on the Global Protect VPN from version 6.1.2-83 to current version 6.2.7-1047. Prior to this update we had no issues. I believe its a DNS issue, where GP is configured to not allow split tunneling and send traffic inside the tunnel. Please help on how to configure the free version GP? or a solution?

Thank you

Re: Global Protect and AXON fleet 3 Dashboard

JayGolf — Mon, 05 May 2025 04:09:08 GMT

Hi @MtnV-IT ,

Please take a look at the techdocs for reference to GP features that require licensing. Split DNS is a feature on GP that requires a license. A work around would be to disable split tunneling. This would force all your traffic, including DNS, through your tunnel.

With that being said, you will still want to ensure DNS is configured correctly internally. Is the fleet 3 application hosted internally? Is the URL you are trying to reach returning a public address or private address?

Re: Global Protect and AXON fleet 3 Dashboard

MtnV-IT — Wed, 07 May 2025 21:11:57 GMT

Hello Jay,

thank you for your response. Our Fleet 3 aplication is hosted internally because we have a Cradle Point (Router) in between, So we made our WAN into a LAN to view the cameras with our Laptops (MDC's) when connected to the Cradle Point in each patrol unit. It sounds like we need to configure our DNS settings in the Cradle Point? and also disable split tunneling in the Cradle Point if we want to continue with the unliscensed version of Global Protect VPN?

Thank You

Re: Global Protect and AXON fleet 3 Dashboard

LukePowell — Thu, 08 May 2025 12:05:30 GMT

Morning,

Im sorry for the slow response, just busy IT over here. Anyway, we ended up excluding the IP address scheme in the client settings under split tunnel. The only other thing we did was add axoncar.local in the app settings to allow traffic for that FQDN. Everything is working so far, I have not heard about the new updates causing issues. I will keep a eye out.

Luke

Re: Global Protect and AXON fleet 3 Dashboard

MtnV-IT — Thu, 08 May 2025 13:42:46 GMT

Good Morning,

just so you know we are using the unlicensed version of Global Protect VPN and I believe that what you just described, you can only do it on the licensed verision. Is that correct?

Thank you

Re: Global Protect and AXON fleet 3 Dashboard

LukePowell — Thu, 08 May 2025 16:27:58 GMT

Afternoon,

We don't pay any extra for a subscription use, like to use GP on a phone. It might be included in our license for the whole Firewall package. I would have to double check.