https://live.paloaltonetworks.com/t5/general-topics/globalprotect-client-config-fail/m-p/277117#M75423 <P>We have GP license for a smaller 220. Idea is to have 220 in DMZ and allow users to connect internall or externally to connect to GP.&nbsp;</P><P>The issue i am having is that when trying to connect internally i am getting not authorized message from the client. It is an on-eman confiuration and i know the account works as i am using same ldap profile to login to GUI, also i can see the group list an accounts in that group. I am tring this from a VM rnnning on my machine sitting on host 10.94.15.2, and below is the crude diagram</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20681i2165D15438B60E42/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20679i38D7774B94037913/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Wed, 17 Jul 2019 21:25:11 GMT raji_toor 2019-07-17T21:25:11Z https://live.paloaltonetworks.com/t5/general-topics/globalprotect-client-config-fail/m-p/277117#M75423 <P>We have GP license for a smaller 220. Idea is to have 220 in DMZ and allow users to connect internall or externally to connect to GP.&nbsp;</P><P>The issue i am having is that when trying to connect internally i am getting not authorized message from the client. It is an on-eman confiuration and i know the account works as i am using same ldap profile to login to GUI, also i can see the group list an accounts in that group. I am tring this from a VM rnnning on my machine sitting on host 10.94.15.2, and below is the crude diagram</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20681i2165D15438B60E42/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/20679i38D7774B94037913/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Wed, 17 Jul 2019 21:25:11 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-client-config-fail/m-p/277117#M75423 raji_toor 2019-07-17T21:25:11Z https://live.paloaltonetworks.com/t5/general-topics/globalprotect-client-config-fail/m-p/277140#M75424 <P>Got it working. For somereason when pushe from panorama firewall didnot like the agent user/user group portal config.</P><P>When done directly from firewall it was working.</P> Wed, 17 Jul 2019 23:02:50 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-client-config-fail/m-p/277140#M75424 raji_toor 2019-07-17T23:02:50Z