topic GlobalProtect Issues with Hotspot Users in GlobalProtect Discussions

GlobalProtect Issues with Hotspot Users

peppywoll — Sat, 09 Jan 2021 01:59:46 GMT

Two different users reported problems when connecting to GlobalProtect when using an iPhone as a hotspot. The users can connect to GP, but are then unable to use HTTPS or ssh to connect to internal assets via the VPN. If the user uses the same laptop and connects via wifi (not using hotspot), GP works fine. Tests with several other users using iPhone hotspots were successful. The users are on Mac OS laptops with GP version 5.0.8. An upgrade of the GP version did not help. Both users have iPhone 7 running IOS 14.2.

Testing showed that the user successfully connects to GP and is able to ping devices over the tunnel. DNS resolution works fine. But connections using ssh or https were unsuccessful. Further testing seemed to indicate an MTU problem. We attempted to have the user change their GP VPN adapter MTU without success.

Solution: In GP version 5.2, there is a new feature to centrally modify MTU. The solution involved having the user upgrade GP to version 5.2.4. In addition to the existing GP Portal Agent, we created an additional GP Portal Agent that contained only the two users. This portal agent was placed before the general Portal Agent used by everyone else. In the new Portal Agent, under the App tab, we changed the GlobalProtect Connection MTU (bytes) from the default 1400 bytes to 1360. In both cases, the user was now able to successfully use GP over the hotspot.

Re: GlobalProtect Issues with Hotspot Users

VILHUEJO — Fri, 14 Oct 2022 07:32:23 GMT

Similar issue with GP (5.2.11, 5.2.12 and 6.0.3) using an iPhone 11 or higher as a hotspot fow Windows 10 with Outlook 365 services. With previous iPhone versions worked well. Tested with iPhone 8 (ios 15/16) without problems. Same tests with iPhone 11 failed, and mails don't be sent.

Change the MTU to 1360 solved the problem.

Re: GlobalProtect Issues with Hotspot Users

jasonrakers — Fri, 14 Oct 2022 11:18:56 GMT

Thanks having a similar issue with hotspot user. I will try this MTU hack.

Re: GlobalProtect Issues with Hotspot Users

Panida_M — Tue, 27 Dec 2022 04:55:38 GMT

Thanks for sharing. I found similar issue with panos version 10.1.8 / gp linux vesion 5.3.4 / connection via iPhone hotspot. User can connect GP and ping to server but cannot ssh to server.

Try to change GlobalProtect Connection MTU to 1360 solved the problem.

Re: GlobalProtect Issues with Hotspot Users

Akilesh — Thu, 18 May 2023 17:53:55 GMT

Had the same issue on version 6.1.1 This change fixed the problem.

Re: GlobalProtect Issues with Hotspot Users

nishad007 — Fri, 27 Oct 2023 15:27:01 GMT

Hii
i also facing same issue i have mac and iphone 14 when i i am sharing hotspot from iphone 14 and if i connected to GP vpn then i am not able to use or access internet
issue not there for android devices or other wifi even working fine with iphone 13
i found MTU solution but not sure where will i get that option in GP settings