topic Re: ASK: PAN-GP Clients can't reach each other in General Topics

ASK: PAN-GP Clients can't reach each other

cragasyah — Thu, 19 Oct 2017 05:52:30 GMT

Hi All,

My GPClients can't communicate to each other, while the intrazone policy is permit.

Anyone has any idea about it?

reaper — Thu, 19 Oct 2017 06:48:29 GMT

Have you tried adding a route for the GP subnet directed at the tunnel interface ?

Is there a NAT rule that could accidentally pick up on the intrazone traffic?

if you set up a packet-diag and trace the global counters, you should get meaningful feedback on what's happening to your packets

Mick_Ball — Thu, 19 Oct 2017 08:40:03 GMT

Our GP clients can communicate with each other.

we have a security policy "trusted zone" to "globalprotect zone"

GP client traffic hits the trusted interface and does a "U" turn.

not sure what your zones are called but if you get stuck let me know your zones and i will advise on policy thingy...

cragasyah — Sun, 22 Oct 2017 12:41:37 GMT

Hi MickBall, thank you for your confirmation, and advise. Let me try first ya.

Once more, thank you