topic GP Mac - No internet access in General Topics

GP Mac - No internet access

winunuhi — Tue, 21 Apr 2020 09:59:41 GMT

https://rodrigolascivo.com

I am not able to connect the internet after connecting to GP in Mac. In windows it works fine

Any ideas?

Re: GP Mac - No internet access

payucon — Sat, 04 Apr 2020 15:15:34 GMT

I'm having this issue as well. I don't see the issue on windows.

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 01:11:36 GMT

Hello,

I'm sure you might have checked, but can you provide some additional details as to how your GP setup on the firewall is?

- different agent->client settings on the gateway?

- can you also check for the client settings as to if you have specific source groups (Windows) and OS: Windows ONLY is selected?

- when on vpn with your mac, can you trace and confirm if your traffic is going across the tunnel and what the road block is? (Can also check "netstat -rn -f inet" for route table).

-If traversing our tunnel, do you see traffic logs on the firewall and identify what's blocking?

Thank you.

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 01:45:59 GMT

Hi,

I'm a user. I don't have access to the firewall configuration

Here's the route table

Routing tables

Internet:
Destination Gateway Flags Netif Expire
default 192.168.1.254 UGSc en1
10.13/16 10.13.90.80 UGSc gpd0
10.13.7.24 10.13.90.80 UGHS gpd0
10.13.8.30 10.13.90.80 UGHS gpd0
10.13.90.80/32 link#14 UC gpd0 !
10.13.90.80 2:50:41:0:1:1 UHLWIi lo0
10.18.98/24 10.13.90.80 UGSc gpd0
10.18.208/20 10.13.90.80 UGSc gpd0
10.18.210/24 10.13.90.80 UGSc gpd0
10.18.234/24 10.13.90.80 UGSc gpd0
10.134.28/24 10.13.90.80 UGSc gpd0
10.134.30/24 10.13.90.80 UGSc gpd0
10.202.16/24 10.13.90.80 UGSc gpd0
127 127.0.0.1 UCS lo0
127.0.0.1 127.0.0.1 UH lo0
169.254 link#9 UCS en1 !
192.168.1 link#9 UCS en1 !
192.168.1.73 f8:e9:4e:66:f7:85 UHLWIi en1 1199
192.168.1.88/32 link#9 UCS en1 !
192.168.1.88 0:26:bb:16:67:1e UHLWIi lo0
192.168.1.90 link#9 UHLWIi en1 !
192.168.1.254/32 link#9 UCS en1 !
192.168.1.254 c8:51:95:fb:d5:d6 UHLWIir en1 1196
201.174.22.122 192.168.1.254 UGHS en1
224.0.0/4 link#9 UmCS en1 !
224.0.0.251 1:0:5e:0:0:fb UHmLWI en1
255.255.255.255/32 link#9 UCS en1 !

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 01:57:51 GMT

Here's some screenshots

VPN DisabledVPN Enabled

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 03:51:00 GMT

This indicates that the administrator configured split-tunnel which means your internet traffic shall take your home/local network.

- Can you ping 8.8.8.8 and traceroute 8.8.8.8 to see where it's breaking?

- Possibly, can you provide any of your GPS and/or GPA logs?

- If this is a new installation on your machine, I would advise to check on the security feature enabled i.e., SystemPreference -> Security&Privacy -> General -> Enable ""App store and identified developers".

There could also be a possibility that there is a Group Policy that's blocking internet for you. Did you verify on that with your SysAdmin?

Thank you.

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 04:02:46 GMT

PING 8.8.8.8 (8.8.8.8): 56 data bytes

64 bytes from 8.8.8.8: icmp_seq=0 ttl=55 time=32.253 ms

64 bytes from 8.8.8.8: icmp_seq=1 ttl=55 time=32.839 ms

64 bytes from 8.8.8.8: icmp_seq=2 ttl=55 time=32.697 ms

64 bytes from 8.8.8.8: icmp_seq=3 ttl=55 time=33.827 ms

64 bytes from 8.8.8.8: icmp_seq=4 ttl=55 time=33.091 ms

64 bytes from 8.8.8.8: icmp_seq=5 ttl=55 time=32.750 ms

64 bytes from 8.8.8.8: icmp_seq=6 ttl=55 time=32.655 ms

64 bytes from 8.8.8.8: icmp_seq=7 ttl=55 time=32.698 ms

64 bytes from 8.8.8.8: icmp_seq=8 ttl=55 time=32.946 ms

64 bytes from 8.8.8.8: icmp_seq=9 ttl=55 time=32.688 ms

64 bytes from 8.8.8.8: icmp_seq=10 ttl=55 time=32.816 ms

64 bytes from 8.8.8.8: icmp_seq=11 ttl=55 time=33.092 ms

64 bytes from 8.8.8.8: icmp_seq=12 ttl=55 time=32.702 ms

64 bytes from 8.8.8.8: icmp_seq=13 ttl=55 time=33.122 ms

64 bytes from 8.8.8.8: icmp_seq=14 ttl=55 time=32.896 ms

64 bytes from 8.8.8.8: icmp_seq=15 ttl=55 time=32.750 ms

64 bytes from 8.8.8.8: icmp_seq=16 ttl=55 time=33.756 ms

64 bytes from 8.8.8.8: icmp_seq=17 ttl=55 time=32.330 ms

64 bytes from 8.8.8.8: icmp_seq=18 ttl=55 time=32.976 ms

64 bytes from 8.8.8.8: icmp_seq=19 ttl=55 time=32.496 ms

64 bytes from 8.8.8.8: icmp_seq=20 ttl=55 time=32.963 ms

64 bytes from 8.8.8.8: icmp_seq=21 ttl=55 time=32.489 ms

64 bytes from 8.8.8.8: icmp_seq=22 ttl=55 time=32.969 ms

64 bytes from 8.8.8.8: icmp_seq=23 ttl=55 time=32.573 ms

64 bytes from 8.8.8.8: icmp_seq=24 ttl=55 time=32.543 ms

64 bytes from 8.8.8.8: icmp_seq=25 ttl=55 time=33.200 ms

64 bytes from 8.8.8.8: icmp_seq=26 ttl=55 time=33.764 ms

64 bytes from 8.8.8.8: icmp_seq=27 ttl=55 time=33.484 ms

64 bytes from 8.8.8.8: icmp_seq=28 ttl=55 time=32.410 ms

64 bytes from 8.8.8.8: icmp_seq=29 ttl=55 time=32.259 ms

64 bytes from 8.8.8.8: icmp_seq=30 ttl=55 time=32.659 ms

64 bytes from 8.8.8.8: icmp_seq=31 ttl=55 time=33.247 ms

64 bytes from 8.8.8.8: icmp_seq=32 ttl=55 time=32.797 ms

64 bytes from 8.8.8.8: icmp_seq=33 ttl=55 time=32.336 ms

64 bytes from 8.8.8.8: icmp_seq=34 ttl=55 time=33.009 ms

64 bytes from 8.8.8.8: icmp_seq=35 ttl=55 time=32.990 ms

64 bytes from 8.8.8.8: icmp_seq=36 ttl=55 time=33.065 ms

64 bytes from 8.8.8.8: icmp_seq=37 ttl=55 time=33.030 ms

64 bytes from 8.8.8.8: icmp_seq=38 ttl=55 time=32.431 ms

--- 8.8.8.8 ping statistics ---

39 packets transmitted, 39 packets received, 0.0% packet loss

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 52 byte packets

1 192.168.1.254 (192.168.1.254) 1.467 ms 0.955 ms 0.860 ms

2 200.38.193.226 (200.38.193.226) 17.004 ms 16.989 ms 16.918 ms

3 189.246.216.82 (189.246.216.82) 42.165 ms 39.132 ms 49.378 ms

4 62.115.162.26 (62.115.162.26) 43.049 ms 62.044 ms 32.744 ms

5 62.115.36.170 (62.115.36.170) 33.409 ms 33.032 ms 32.648 ms

6 108.170.247.161 (108.170.247.161) 32.784 ms

108.170.247.225 (108.170.247.225) 33.295 ms

108.170.247.129 (108.170.247.129) 33.592 ms

7 209.85.245.229 (209.85.245.229) 34.335 ms

108.170.234.215 (108.170.234.215) 32.886 ms

66.249.94.217 (66.249.94.217) 33.116 ms

8 8.8.8.8 (8.8.8.8) 33.387 ms 32.929 ms 32.697 ms

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 04:16:29 GMT

So technically there is internet access for you. Have you performed any change or did the ping/trace work right away?

Can you telnet to anything on the internet on port 80 and 443?

Try one with IP and one with Hostname as:

telnet 8.8.8.8 443

telnet yahoo.com 80

This is to eliminate any DNS related issue.

Thanks.

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 04:32:21 GMT

telnet 8.8.8.8 443

Trying 8.8.8.8...

Connected to 8.8.8.8.

Escape character is '^]'.

^CConnection closed by foreign host.

telnet yahoo.com 80

yahoo.com: nodename nor servname provided, or not known

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 04:49:52 GMT

This clearly seems to be a DNS issue. Do this: System Preferences > Network > Advanced > TCP/IP > "Renew DHCP Lease" and try again.

Thank you.

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 04:56:20 GMT

same issue no internet or what it seems as no internet

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 04:58:21 GMT

Under same path as previously mentioned, what DNS servers do you currently see when on VPN?

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 05:05:18 GMT

192.168.1.254

Re: GP Mac - No internet access

ALLADASAINITIN — Tue, 07 Apr 2020 05:08:53 GMT

There is your problem. Remove that from the settings and add your ISP DNS servers (preferred) ? or any global dns 8.8.8.8/4.2.2.2? and try to access internet.

Re: GP Mac - No internet access

payucon — Tue, 07 Apr 2020 05:16:31 GMT

Did not work

Stays there

Re: GP Mac - No internet access

cbedington — Tue, 28 Apr 2020 14:02:26 GMT

I have a customer having the same issue.

I have installed the latest version of GlobalProtect I have available to me. (5.0.6-29)

I made sure there were no issues in Security & Privacy and the firewall is turned off.

I have the debug log files if that helps in any way.

OS X 10.14.2

He only started having issues late yesterday afternoon.

Re: GP Mac - No internet access

hoyomi — Mon, 08 Jun 2020 15:21:29 GMT

Has anyone got a solution for this? I'm using macOS 10.15.5 and GP 5.1.1-12

I agree that the internet is not completely down but some routing issues. traceroute to 8.8.8.8 works both with or without GP, except it is extremely slow with GP.

I even tried a Windows 10 VM on my mac (macOS 10.15.5) without changing any mac configuration. And it works perfectly fine.

I'm thinking it could be some compatibility issue between GP and macOS, but I'm not sure what to check next.

Re: GP Mac - No internet access

tlroi4401 — Tue, 09 Jun 2020 14:22:21 GMT

I am having the same experience.

When I connect to our VPN to begin with, it works as you'd expect. When I map an SMB share, it's almost like the tunnel goes down. I can't ping or connect to anything internal (where i'm VPN'd in), however, I can ping 8.8.8.8. When I disconnect from the VPN, everything continues normally.

We are using PAN-OS 9.1.2 and GP 5.1.4; MacOS 15.5