topic Re: Block GlobalProtect VPN while internal in General Topics

Block GlobalProtect VPN while internal

tony.dinh — Tue, 26 Jan 2016 21:17:45 GMT

We currently have Global Protect connect method as "Always On". Is it possible to not connect while internal?

Thanks

pankaku — Wed, 27 Jan 2016 07:01:37 GMT

You can deny the traffic goging to the portal address when the host are on internal side. Create a security policy like

trust to untrust destination ip (portal address) action deny.

VinceM — Wed, 27 Jan 2016 08:45:23 GMT

Hi,

When configuring your GP, you can specify "Internal host detection". Provide IP and internal DNS name.

If resolution is correct, vpn will never go up or will use internal gatewy if you want.

Hope help.