topic Re: Trace the path the VPN takes too and through the firewall in General Topics

Trace the path the VPN takes too and through the firewall

jdprovine — Fri, 18 May 2018 14:56:55 GMT

I tired using the show routing route which displays the routing table. I did not do the initial configuration of the VPN's we have and I would like to be able to find a way to "draw a line" showing how the VPN works and is configured. I need visual.

Re: Trace the path the VPN takes too and through the firewall

BPry — Mon, 21 May 2018 10:56:37 GMT

@jdprovine,

Are we talking about the GlobalProtect VPN or are you talking about the VPN that you have setup on that ASA?

Re: Trace the path the VPN takes too and through the firewall

jdprovine — Mon, 21 May 2018 12:35:37 GMT

@BPry

The global protect VPN

Re: Trace the path the VPN takes too and through the firewall

jdprovine — Mon, 21 May 2018 18:40:26 GMT

There must not be a good way to do this

Re: Trace the path the VPN takes too and through the firewall

BPry — Tue, 22 May 2018 19:56:09 GMT

@jdprovine,

Sorry a lot of people are currently at Ignite so answers might take a few. I'm not aware of an easy way to really draw this out. Since GlobalProtect resides on the firewall itself you really don't need a static route or anything like that for the traffic in most cases.

So since the GP lives on the firewall (likely in it's own zone) it will kind of take the same path that traffic from/to the firewall in general would. You should be able to do traceroutes once you've connected to GP if your security policies allow that to take place.