topic Re: Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup in General Topics

Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup

mypasecure2017 — Fri, 13 Dec 2019 17:27:59 GMT

I am starting to build a clientless vpn setup, but I am getting errors when building a DNS Proxy and DNS Server Profile.

I get this error msg. I tried ethernet, tunnels and loopback interfaces and they all failed. I tried following the instructions but i get the same error message. Does it matter if use the a loopback or tunnel interface? all of them are set for "layer 3". not sure why its calling it "invalid".

Details:

Validation Error:

dns-proxy -> DNS-Proxy -> interface 'loopback.998' is not a valid reference

dns-proxy -> DNS-Proxy -> interface is invalid

No DNS default obj found

(Module: dnsproxyd)

Commit Failed.

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-clientless-vpn/configure-clientless-vpn.html

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-proxy-object

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/dns/configure-a-dns-server-profile.html#id658a61ea-eaab-45b5-993c-8a891a802435

Re: Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup

mypasecure2017 — Fri, 13 Dec 2019 20:05:28 GMT

btw..I get the error as I commit to Template from Panorama.

Re: Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup

BPry — Fri, 13 Dec 2019 22:20:10 GMT

@mypasecure2017,

So from the message that the validation is giving you it would appear that you are attempting to use a loopback interface that doesn't exist. Are you sure that the template actually includes the 'loopback.998' interface that you are trying to use here?

Re: Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup

mypasecure2017 — Mon, 16 Dec 2019 23:47:06 GMT

Yes. I am sure because I ran into similar issues like it and fixed it. But this time with DNS Proxy nothing seems to work regardless which interface I use. I suspect that there is a sync problem between Panorama and the firewall device because I created a tunnel and loopback interface within Panorama but only partial configs was pushed to the firewall device. I am not sure how or where I can go to find what items are synced between Panorama and the firewall.

Re: Global Protect 8.1 - Building Clientless VPN but stuck on DNS-Proxy Setup

FarzanaMustafa — Thu, 16 Jan 2020 01:51:09 GMT

@mypasecure2017

Maybe try these two suggestions.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltWCAS

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boNjCAI