topic Re: Please tell me about the DNS server address that is dynamically set when connecting to Global Protect. in Prisma Access Discussions

Please tell me about the DNS server address that is dynamically set when connecting to Global Protect.

y.saitou — Fri, 27 Jun 2025 01:32:03 GMT

Attention: JAPAC TPM team
Hello Team,

If you run ipconfig /all after connecting to GlobalProtect, the DNS server entry will show an IP address in the same segment as the device's IP address.

-I understand that this DNS server is the IP address used as a proxy, but is that correct?
Also, is it correct to understand that this DNS server's IP address is created within a new IP pool during auto-scaling?

-I checked two MU-SPNs, and both had .1 as the fourth octet, but is the fourth octet fixed?

If there is no information or the information is not publicly available, we would appreciate it if you could let us know.

Re: Please tell me about the DNS server address that is dynamically set when connecting to Global Protect.

reaper — Fri, 27 Jun 2025 09:06:13 GMT

The ip pool configured in prismsa access infrastructure is split up into /24 segments that are distributed among the SPNs with a minimum of 1 /24 per SPN and additional /24 segments being assigned as the number of users increases on that SPN. For each /24 pool, the .1 address is reserved as the default gateway and DNS proxy

Re: Please tell me about the DNS server address that is dynamically set when connecting to Global Protect.

y.saitou — Fri, 27 Jun 2025 09:49:13 GMT

@reaper

Thank you for your response.

I was able to solve the problem.
Thank you.