topic Re: Global protect Always On - External connections in General Topics

Global protect Always On - External connections

Metgatz — Mon, 08 Jan 2024 21:10:11 GMT

Global protect Always On - External connections

Hello LIVE community!

I hope you are well.

I have had to configure Global Protect on several occasions but I have a question that I am being asked in this case:

Is it possible in S.O windows to use the Always On, filtering that only connects to GP when it detects the connection in an External way, home-office, cafe, client offices,etc, but when it is in the HQ, it does not connect to GP.

Is it feasible and what would be the important recommendations to consider to implement it?

Thanks

I remain attentive

Best regards

Re: Global protect Always On - External connections

rmfalconer — Mon, 08 Jan 2024 22:36:32 GMT

Are you referring to something like internal host detection? GP will do a lookup to see if a host resolves to determine if its internal or external.

Re: Global protect Always On - External connections

Metgatz — Mon, 08 Jan 2024 22:39:16 GMT

Yes, something similar. Is there any way that only when this external connects and when this internal, does not connect, validate that this intenro but not connected to GP?

Thanks for your time and cooperation

Re: Global protect Always On - External connections

rmfalconer — Mon, 08 Jan 2024 23:26:38 GMT

Yes, that's what Internal Host Detection does. The name is generic but that's actually a feature in GP.

Advanced Internal Host Detection (paloaltonetworks.com)

Re: Global protect Always On - External connections

Metgatz — Thu, 11 Jan 2024 06:10:50 GMT

Thanks @rmfalconer

The best method for this is use pre logon always on that right ?