https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-enforce-globalprotect-connexion-for-network-acces/m-p/1234243#M6912 <P>Hi,</P> <P>I have configure some globalprotect portal with option Enforce GlobalProtect Connexion for Network Acces enable.</P> <P>&nbsp;</P> <P>For our external portal, this option works great.</P> <P>But for our internal portal, this option seems to not working like i expect.</P> <P>&nbsp;</P> <P>If i am on internal network, and cannot connect to internal portal, the network is disabled.</P> <P>&nbsp;</P> <P>But, if i am on a external network, and the portal is unreachable, the GP client disabled itself, and the access to the network is not disabled.</P> <P>&nbsp;</P> <P>If the globalprotect cannot joined the portal address, he doesn't block the traffic&nbsp; when the option Enforce GlobalProtect Connexion for Network Acces is enabled ?</P> <P>&nbsp;</P> Thu, 17 Jul 2025 09:04:35 GMT CHARRIER 2025-07-17T09:04:35Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-enforce-globalprotect-connexion-for-network-acces/m-p/1234243#M6912 <P>Hi,</P> <P>I have configure some globalprotect portal with option Enforce GlobalProtect Connexion for Network Acces enable.</P> <P>&nbsp;</P> <P>For our external portal, this option works great.</P> <P>But for our internal portal, this option seems to not working like i expect.</P> <P>&nbsp;</P> <P>If i am on internal network, and cannot connect to internal portal, the network is disabled.</P> <P>&nbsp;</P> <P>But, if i am on a external network, and the portal is unreachable, the GP client disabled itself, and the access to the network is not disabled.</P> <P>&nbsp;</P> <P>If the globalprotect cannot joined the portal address, he doesn't block the traffic&nbsp; when the option Enforce GlobalProtect Connexion for Network Acces is enabled ?</P> <P>&nbsp;</P> Thu, 17 Jul 2025 09:04:35 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-enforce-globalprotect-connexion-for-network-acces/m-p/1234243#M6912 CHARRIER 2025-07-17T09:04:35Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-enforce-globalprotect-connexion-for-network-acces/m-p/1234245#M6913 <P>Problem fixed when i changed the parameter "Connect Method" to "User-logon ( Always on)" instaed of "Pre-logon (Always On)" on the app tab in portal agent configuration.</P> Thu, 17 Jul 2025 09:37:58 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-enforce-globalprotect-connexion-for-network-acces/m-p/1234245#M6913 CHARRIER 2025-07-17T09:37:58Z