topic Re: GlobalProtect Remote User VPN Connection Issues in General Topics

GlobalProtect Remote User VPN Connection Issues

lakshithas — Fri, 02 Dec 2016 10:22:46 GMT

Hi All,

We deployed PA3020 firewall to our production. We have given vpn to client side and it working fine but the problem is they are no any disconnection button to disconnect from vpn client.

Please advice me

Thanks.

Re: GlobalProtect Remote User VPN Connection Issues

bmorris1 — Fri, 02 Dec 2016 10:28:10 GMT

Hi Lakshithas,

You can disconnect by disabling the app. If you're using Windows, open the hidden icons on the task bar and right click the GP icon, select disable.

hope this helps,

Ben

Re: GlobalProtect Remote User VPN Connection Issues

reaper — Fri, 02 Dec 2016 10:35:19 GMT

You'll want to change the connect method to 'on demand' rather than 'always on' which doesn't allow disconnecting

Re: GlobalProtect Remote User VPN Connection Issues

BPry — Fri, 02 Dec 2016 14:02:23 GMT

You might want to look at your GlobalProtect config as a whole and decide which path makes more sense for your business.

Always On connections are really good at making sure that your corporate issued devices aren't connecting to joe's wireless and provides a good level of protection. If they aren't using issued devices to connect then I would personally still use an Always On connection and setup slit-tunnel so that only the corporate traffic is going through GP. This provides them a path to the resources that they need access to but will just shove everything else out through the internet.

On-Demand connections I would really only recommend if this is users connecting in from a home connection from their desktop or laptop. This allows them to connect to everything but also allows them to turn it off when they don't need it; this usually provides a little more piece of mind over the company being able to montior all of their network traffic.

Re: GlobalProtect Remote User VPN Connection Issues

lakshithas — Mon, 05 Dec 2016 02:46:08 GMT

Hi all,

Thanks guys.

I will do the needful GlobalProtect configuration.

Again thanks for the prompt support.

Friends I need to clarify one thing. Will PA release cilentless vpn near future? We have configured clientless VPN with ASA. But still we are unable to provide that with PA3020. Any suggestions??