topic Re: Connected by GlobalProtect but can't get access in spcecific port in General Topics

Connected by GlobalProtect but can't get access in spcecific port

hamza-zidane — Sat, 19 May 2018 12:44:41 GMT

Hello brothers.

I'm connected with GlobalProtec VPN, i can access to the local network from the external, i can ping on local machine, i can use rdp for some servers, but when i want use mstsc for an @IP:port, for exemple 10.0.0.1:10100 in order to run some remote application, i can't do that, also i can telnet on 10.0.0.1 by 10100 port.

NB: when i use an internal machine i can access via mstsc for an @IP:port, but with globalprotect i can't.

Thanks for help.

Re: Connected by GlobalProtect but can't get access in spcecific port

Remo — Sun, 20 May 2018 18:06:59 GMT

Sounds like the app "ms-rdp" is only allowed for service "application-default on the VPN firewall.

Re: Connected by GlobalProtect but can't get access in spcecific port

BPry — Mon, 21 May 2018 10:53:22 GMT

@hamza-zidane,

To go along with what @Remo already pointed out, make sure that the device is actually getting identified correctly in the application logs.

Re: Connected by GlobalProtect but can't get access in spcecific port

hamza-zidane — Mon, 21 May 2018 12:36:05 GMT

Hi brothers,

That's help me resolve the problem, but now i have another problem, normaly i have 2 types of users using vpn, type must get full access, and the second type access only for some specific port.

when i modify the security rule i try to add users but i can't find local users.

how can i solve this problem plz

Thanks.

Re: Connected by GlobalProtect but can't get access in spcecific port

BPry — Tue, 22 May 2018 20:02:52 GMT

@hamza-zidane,

They should show up I believe, but I can't be much help as I don't actively utilize local users for anything. If needed I would open up a TAC case and see what they can tell you on this one.

Also note that users won't always show up in the dropdown and you sometimes simply have to enter the user in and hit okay. That dropdown box usually works, but you can expect it to show incorrectly occassionally.

Re: Connected by GlobalProtect but can't get access in spcecific port

hamza-zidane — Wed, 23 May 2018 08:58:07 GMT

Hi,

we just need to enter the user name manually 🙂

Re: Connected by GlobalProtect but can't get access in spcecific port

BPry — Wed, 23 May 2018 15:33:00 GMT

@hamza-zidane,

Glad to hear that worked. Keep in mind going forward that the dropbox usually works, but if you run into the situation going forward always try to manually enter the information and see if it will validate the configuration.