topic External DNS resolution + Globalprotect 5.2.4 in GlobalProtect Discussions

External DNS resolution + Globalprotect 5.2.4

BCyril — Wed, 03 Mar 2021 19:28:01 GMT

We had Paloalto Globalprotect VPN version 5.0.9 on our environment. We recently upgraded our VPN client to Globalprotect version 5.2.4. Right after then I see issue in resolving external dns as shown below.

After connecting to globalprotect VPN, When I try to do nslookup for any external website, resolution happens using internal dns server within our network but not through 8.8.8.8.

Moment I disconnect my globalprotect vpn session, I am able to resolve (do nslookup) for public website using google dns.

Has anyone faced this issue and have a solution?

Works not:

C:\Users>nslookup google.com 8.8.8.8
Server: UnKnown
Address: 8.8.8.8

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** UnKnown can't find google.com: Non-existent domain

Works fine:

C:\Users>nslookup google.com
Server: <internal dns server>
Address: <Internal DNS Server>

Non-authoritative answer:
Name: google.com
Addresses: 2607:f8b0:4004:82a::200e
142.250.73.238

Re: External DNS resolution + Globalprotect 5.2.4

Mick_Ball — Thu, 04 Mar 2021 13:48:27 GMT

Are you using split tunnel along with app/split tunnel traffic and dns. if so then some bugs were ironed out in 5.2.5.

Re: External DNS resolution + Globalprotect 5.2.4

lenbrian — Mon, 19 Apr 2021 19:42:53 GMT

Did you find a resolution to this? I am experiencing similar issues while attempting to do an nslookup using external DNS servers.

Re: External DNS resolution + Globalprotect 5.2.4

Mick_Ball — Wed, 21 Apr 2021 14:40:38 GMT

can you go into more detail with client version and GP app setting for split tunnel DNS.