topic Re: Global Protect - ip address for portal web service restricts visitors by their ip address - WHY? in General Topics https://live.paloaltonetworks.com/t5/general-topics/global-protect-ip-address-for-portal-web-service-restricts/m-p/16038#M11716 <HTML><HEAD></HEAD><BODY><P>The IP address that you select is actually based on the interface that you have selected. So its actually a single IP.</P><P></P><P>From your description that you are able to connect on the same subnet but not on a different subnet tells me that you have a routing issue. </P><P></P><P>Do you have default route or a static route with 36.12.0.0/16 on the firewall? and vice versa if the device on 36.12.2.3 has a route to reach 36.8.2.3</P></BODY></HTML> Thu, 29 May 2014 03:47:13 GMT nchong 2014-05-29T03:47:13Z Global Protect - ip address for portal web service restricts visitors by their ip address - WHY? https://live.paloaltonetworks.com/t5/general-topics/global-protect-ip-address-for-portal-web-service-restricts/m-p/16037#M11715 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>We are a bit confused. It appears that our ip address setting under Network&gt;GlobalProtect&gt;Portals must be set to either an IP Range or IP/Subnet, therefore it is not necessarily a single ip address (which is what I thought it should be).</P><P></P><P>The part that is confusing us, is that the ip address/subnet setting for the portal web service is determining which users (by their ip address) can connect to the vpn web login.&nbsp; If the visitor's ip address does not fall into the same subnet, they are unable to launch the login website (it just times out).&nbsp; It seems that ALL ip addresses should be able to launch the vpn web login screen?</P><P></P><P>example:</P><P></P><P>If my portal web service ip address is (36.8.2.3/16) BOTH 36.8.5.12 AND 36.8.5.23 can launch the vpn login website.</P><P></P><P>If my portal web service ip address is (36.8.2.3/24) 36.8.12.23 can launch the vpn login website, but, 36.12.2.3 can NOT launch the vpn login website?</P><P></P><P>I am confused as to why this TARGET portal web service ip address impacts the visitors based on their ip address?</P><P></P><P>thanks.</P></BODY></HTML> Tue, 27 May 2014 19:00:17 GMT https://live.paloaltonetworks.com/t5/general-topics/global-protect-ip-address-for-portal-web-service-restricts/m-p/16037#M11715 shank 2014-05-27T19:00:17Z Re: Global Protect - ip address for portal web service restricts visitors by their ip address - WHY? https://live.paloaltonetworks.com/t5/general-topics/global-protect-ip-address-for-portal-web-service-restricts/m-p/16038#M11716 <HTML><HEAD></HEAD><BODY><P>The IP address that you select is actually based on the interface that you have selected. So its actually a single IP.</P><P></P><P>From your description that you are able to connect on the same subnet but not on a different subnet tells me that you have a routing issue. </P><P></P><P>Do you have default route or a static route with 36.12.0.0/16 on the firewall? and vice versa if the device on 36.12.2.3 has a route to reach 36.8.2.3</P></BODY></HTML> Thu, 29 May 2014 03:47:13 GMT https://live.paloaltonetworks.com/t5/general-topics/global-protect-ip-address-for-portal-web-service-restricts/m-p/16038#M11716 nchong 2014-05-29T03:47:13Z