topic Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn. in General Topics

Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn.

AsilKewal — Fri, 03 Nov 2023 06:55:22 GMT

Case:
Global Protect VPN is enabled in HO PA220.
BO also have PA220, HO and BO connected over site-to-site vpn,
If user is connected to HO LAN, internal host detection works and identify it as Internal corporate network.

And if user is connected to BO LAN, it just connects to GP VPN even though site to site vpn is active and internal host detection does't work.

Re: Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn.

JayGolf — Fri, 03 Nov 2023 18:55:18 GMT

Hi @AsilKewal ,

On the branch GP portal config, what do you have set for the "connect method"?

Re: Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn.

AsilKewal — Mon, 27 Nov 2023 05:29:38 GMT

Hi Jaygolf,

GP is only configured at HO, however there is a site-to-site tunnel between HO and BO.
users gets connected GP to HO as external, internal host is not getting recognised over site-to-site tunnel.

Re: Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn.

AsilKewal — Wed, 29 Nov 2023 05:22:08 GMT

Hi,
This issue is resolved, there was a DNS host name resolution issue at BO which is now sorted.
GP client now detecting BO network as "Corporate Internal Network"