topic Re: GlobalProtect with Vodafone and Telecom in General Topics

GlobalProtect with Vodafone and Telecom

HF_Martini6 — Mon, 10 Feb 2020 10:01:35 GMT

One of our Colleagues isn't able to connect from his home in Germany to our Gateway in Switzerland when using the GlobalProtect Client (V. 5.1.0-75) when using either his Home Internet Connection (via WiFi) nor when using a Mobile Hotspot (Vodafone Mobile on iPhone), are there any Limitations or issues known with this Combination?

Re: GlobalProtect with Vodafone and Telecom

SutareMayur — Mon, 10 Feb 2020 10:16:56 GMT

@HF_Martini6Hello,

There are no limitations as such. What do you see in the logs on firewall ?

- Mayur

Re: GlobalProtect with Vodafone and Telecom

HF_Martini6 — Mon, 10 Feb 2020 10:41:50 GMT

unfortunately i do not have access to any Firewall Logs or Settings, i can only see what's going on in the Logs of the Machine my Colleague is using.

Re: GlobalProtect with Vodafone and Telecom

SutareMayur — Mon, 10 Feb 2020 11:55:14 GMT

Is there any chance if someone can check logs on firewall? Check if request is hitting firewall and it is getting allowed.

Mayur

Re: GlobalProtect with Vodafone and Telecom

HF_Martini6 — Mon, 10 Feb 2020 13:23:32 GMT

i'll check with our iT Security Departement aka "the Dungeon Keepers"

Re: GlobalProtect with Vodafone and Telecom

Robert2 — Wed, 28 Jun 2023 09:39:55 GMT

Hi,

I have a similar issue with Global Protect with a user on Vodafone, Germany.

Did you ever fix this ?

Re: GlobalProtect with Vodafone and Telecom

BPry — Thu, 29 Jun 2023 13:09:21 GMT

@Robert2,

You might get more traction on your question opening a new discussion. As @SutareMayur mentioned in this thread, the first place to look would be the firewall logs to ensure the traffic is evening hitting your device.

Re: GlobalProtect with Vodafone and Telecom

reaper — Thu, 29 Jun 2023 13:58:02 GMT

I've had an issue issue with these providers where they were offering IPv6 at the customer level and applying NAT64 once connections left their network. The additional ipv6 header was wreaking havoc on GP connectivity and we ended up needing to lower the MTU for these users to be able to get connected, might be worth checking if you have a similar issue

Re: GlobalProtect with Vodafone and Telecom

Robert2 — Mon, 12 Feb 2024 09:23:13 GMT

It turns out this was a weird MTU issue, Manually decreasing the MTU on the NIC/IP stack via powershell, fixed end to end traffic.

Thanks Reaper