topic Re: Globalprotect gateway routes in General Topics

Globalprotect gateway routes

jdprovine — Wed, 22 Aug 2018 19:19:09 GMT

Are the routes configured on the gateway for globalprotect advertised to a non globalprotect client? Like cisco or a native client?

Re: Globalprotect gateway routes

BPry — Thu, 23 Aug 2018 02:39:42 GMT

@jdprovine,

Kinda.

Most Android devices should be getting the access route configuration and only routing the listed routes through the VPN connection. Same goes for most builds of Linux. Windows I honestly have no idea and would just recomend they use the client; it provides a better experiance and will work as intended.

iOS is a different beast and will only route 0.0.0.0/0 regardless of what you're using as an access route configuration unless you are using the GlobalProtect app. This is a limitation within iOS and not something you can really get around.

It's important to remember that not everyone follows the same 'standards' when they are building things like this out. Something that works as expected on a Motorola or similar Android phone may not work on a Google Pixel running a newer build of Android because everyone implements things a little different.

Re: Globalprotect gateway routes

jdprovine — Thu, 23 Aug 2018 16:54:59 GMT

@BPry

I have recommended to the mac users in which this situation is a problem but they don't want the globalprotect client on their machines and I also recommended the gp version that allows multiple portals (in which I have found server bugs, like not giving me the options to disconnect LOL)

Yeah I suggested to the user that maybe the information of the routes is not being passed to their native client because either the client cannot understand it, is getting it from someone else or something of that sort

Re: Globalprotect gateway routes

jdprovine — Fri, 24 Aug 2018 15:18:03 GMT

It also appears that the ciscos vpn client allong with the mac native vpn client is getting more routes that is advertised in the globalprotect gatway that it is connecting too