topic Re: GlobalProtect Panel suppression in General Topics

GlobalProtect Panel suppression

abryantgca — Wed, 05 Jul 2017 16:14:36 GMT

We have Global Protect set up to use user-logon and use user certificastes issued by our PKI to authenticate users. When a user logs in while connected to an external network, it connects just fine. But when a user logs into windows while connected to our internal network, the panel launches showing a status of not connected. This is very confusing to our users because they don't understand that the reason they aren't connected to the VPN is because they don't need to be, they think something is wrong. Is there a way to supress this kind of action when the machine is on our internal network?

Re: GlobalProtect Panel suppression

BPry — Wed, 05 Jul 2017 16:37:49 GMT

@abryantgca,

Would it be possible for you to just configure an internal gateway so that you would technically 'connect' and you wouldn't have the 'not connected' message. I'm not aware of a way to supress the panel unless you hide it across the board, and I'm guessing that you want it displayed when users are off of your internal network so they know that they are actually connected?

Re: GlobalProtect Panel suppression

abryantgca — Wed, 05 Jul 2017 16:47:33 GMT

I can look into that. I'm just concerned about creating unnecessary extra traffic on our network. We use our PA820 as a perimeter device, I don't want to impact performance by sending all internal traffic through it aas well.

Re: GlobalProtect Panel suppression

BPry — Wed, 05 Jul 2017 17:02:32 GMT

@abryantgca

Depending on how you configure it you wouldn't need to; it would make the initial connection but your internal traffic would still process how it normally would.