topic Re: problems with dns resolutions in General Topics

problems with dns resolutions

JoseJarrin — Thu, 04 Jan 2024 21:37:47 GMT

Hello, I have a problem with a DNS resolution, in some users with the GP agent 5.2.10-6 we can reach a resource for example vmare.x.x, but with other users.
There are several important points here:
All users have the same version of the global protect agent.
To reach the vware resource, the user connects to the VPN that is located on vsys 1 and goes to vsy2.
security policies are not blocking any user.
When a user who does not access this resource, no log is found or displayed in the fw Monitoring.
As a substitute measure, we configure this resolution for the user on the machine itself.

Do you have any idea how to solve this problem?

Re: problems with dns resolutions

Claw4609 — Fri, 05 Jan 2024 15:17:40 GMT

Do all users get the same GlobalProtect Gateway client settings? Specifically, the network services piece contain the dns servers and dns suffix.

Re: problems with dns resolutions

JoseJarrin — Sun, 07 Jan 2024 17:00:55 GMT

If all users have the same version of global protec 5.2.10-6, both the DNS prefix and everything is correct, they are specific cases in 4 users now it is becoming like a snowball since the users are increasing, which yes What I can see is that when a user tries to access the service it is not shown in the FW.
what I mean is that there is no connection log to port 443 even though the user telnets to that port.