topic Global protect portal redirect to https in General Topics

Global protect portal redirect to https

BigPalo — Thu, 26 Apr 2018 09:59:35 GMT

Hi,

We have a Palo alto in which if you try to access to the global protect portal using http, its automactically redirected to https.

For example: if we access to http://vpn.xxx.com , the browser redirects to https://vpn.xxx.com. So thats perfect.

But we have another PA with another GP Portal (https://vpn.yyy.com, in which is not redirected to https. Where is this option configured??? I can not find this option in Pa config GP.

thanks

Re: Global protect portal redirect to https

BPry — Thu, 26 Apr 2018 13:06:03 GMT

@BigPalo,

There is PAN-75340 that would help with this, but as a workaround you can enable the portal to function as a clientless vpn portal and it will allow the redirect to take place.

I'm going to guess that the difference that you are seeing is caused by one of these two possible scenarios.

1) You have the Clientless VPN Portal configured on one but not the other, which would allow the redirect to function correctly.

2) You have a load-balancer/ARR or something of that nature that is actually performing this redirect before the request hits the firewall.

Re: Global protect portal redirect to https

BigPalo — Thu, 26 Apr 2018 13:27:58 GMT

It could be the option 1. LB is discarded.

Where can i get info about that open bug?

Re: Global protect portal redirect to https

BPry — Thu, 26 Apr 2018 13:51:56 GMT

@BigPalo,

Unfortunately the bug ID is something that I don't really have the details on, I simply know that it was associated with this issue and was referenced by another Palo Alto employee on the 8.0 documentation HERE. You could likely reach out to your SE to see what the status is or bug reaper, jdelio, or kiwi to see if they could look it up for you on the internal database.

Re: Global protect portal redirect to https

BigPalo — Thu, 26 Apr 2018 14:28:27 GMT

The PA in which is working has the version 8.0.8

The another PA when its not working redirect has 7.1.15 version.