topic Re: when connected to global protect VPN unable to see other devices on network in General Topics

when connected to global protect VPN unable to see other devices on network

fatboy1607 — Tue, 25 Oct 2016 10:36:59 GMT

when connected to global protect VPN unable to see other devices on network

Re: when connected to global protect VPN unable to see other devices on network

Fahad-Khan — Thu, 27 Oct 2016 07:35:19 GMT

is Internet connnectivity established when you connect the link ???

Re: when connected to global protect VPN unable to see other devices on network

fatboy1607 — Thu, 27 Oct 2016 08:18:08 GMT

Yes Interent is fine, i am able to connect to global protect Gateway also , able to access intranet resources.

Only thing is unable to access local resources like local printer etc.

Thanks in Advance.

Re: when connected to global protect VPN unable to see other devices on network

kiwi — Thu, 27 Oct 2016 09:31:11 GMT

Hi @fatboy1607,

Did you disable access to the local subnet ?

Disable access to local network

Depending on your PAN-OS version :

PAN-OS 7.0 : Network tab > GlobalProtect > Gateways > <Your Gateway> > Client Configuration > Network Settings > <Your Config> > Network Settings

PAN-OS 7.1 : Network tab > GlobalProtect > Gateways > <Your Gateway> > Agent > Client Settings > <Your Config> > Network Settings

If that's the case then this article might be useful for you :

GlobalProtect Disable Local Subnet Access

I hope this helps,

-Kim.

Re: when connected to global protect VPN unable to see other devices on network

fatboy1607 — Thu, 27 Oct 2016 09:32:41 GMT

Thanks Kim

But we have enabled that feature. still local network is not accessible.

Re: when connected to global protect VPN unable to see other devices on network

kiwi — Thu, 27 Oct 2016 09:35:44 GMT

Did you mean disabled ? If the checkbox is checked, then you won't have access to your local resources.

If you want access to your local network, the option needs to be disabled (= not checked).

Hope this helps,

-Kim.

Re: when connected to global protect VPN unable to see other devices on network

fatboy1607 — Thu, 27 Oct 2016 09:38:03 GMT

it is not checked .

Re: when connected to global protect VPN unable to see other devices on network

kiwi — Thu, 27 Oct 2016 10:26:14 GMT

Hi,

Any access routes configured ?

I'd check my routing table when connected. Are you egressing the expected interface while connected ?

-Kim.

Re: when connected to global protect VPN unable to see other devices on network

fatboy1607 — Thu, 27 Oct 2016 10:28:40 GMT

yes Egress interface is correct.

and I can see local routes learned gateway type On-link.

Re: when connected to global protect VPN unable to see other devices on network

DonohoeRobert — Thu, 27 Oct 2016 12:17:21 GMT

Hi,

As its a gp connection its probably arriving on a different zone. Do you have rules in place to allow the traffic ?

Enable the interzone logging rule and set it to log at session end. Do you see the traffic hit this rule ?

Replicate trying to access machines on the network and filter by the user in the traffic logs , ping a screenshot up as a reply ..

also make sure no denies hitting the threat logs or url logs ..

kind regards

robert D