topic Re: Enforce internet proxy setting on Global protect vpn client machine in General Topics

Enforce internet proxy setting on Global protect vpn client machine

Alok-kumar — Sun, 09 Sep 2018 18:40:47 GMT

Hi Experts,

I wanted to know if there is any possibility wherein the internet proxy settings can be enforced on client machine while connectting to global protect VPN.

many thanks in advance!!

Re: Enforce internet proxy setting on Global protect vpn client machine

Mick_Ball — Mon, 10 Sep 2018 17:08:19 GMT

GlobalProtect will auto use your device proxy settings, or did you mean just enforce proxy for GP connection.

Re: Enforce internet proxy setting on Global protect vpn client machine

reaper — Wed, 12 Sep 2018 08:12:42 GMT

GlobalProtect only provides an IP, DNS and WINS settings

Re: Enforce internet proxy setting on Global protect vpn client machine

Alok-kumar — Thu, 13 Sep 2018 09:12:45 GMT

Thanks for your response, thats what my understanding is too. Is there any way we can push internet proxy setting in vpn client machine during GP connection and release the settings when GP is disconnected 🙂

Re: Enforce internet proxy setting on Global protect vpn client machine

reaper — Thu, 13 Sep 2018 09:57:35 GMT

You could either try some sort of log on script through your AD environment, or set up a local scritp that is bound to an interface (and bind it to the gp interface), there are tools that can do this too

Re: Enforce internet proxy setting on Global protect vpn client machine

Mick_Ball — Thu, 13 Sep 2018 12:42:49 GMT

We have similar but the other way around, users are sent to a proxy when not connected and go direct when connected.

we use proxy.pac file for both windows and ipad (global proxy). Not everyones cup of tea but used it for years before palo alto was born so already pretty much in place... works well. Can be modified for your requirement.