topic Re: Global Protect Access routes in General Topics

Global Protect Access routes

gpandya — Thu, 30 Apr 2020 08:47:11 GMT

Hi,

I have question for access routes. We have configured global protect and advertised only one access route however after connecting to global protect VPN, we can see multiple access routes in client machine. Is there any other criteria for access routes to be advertised?

Re: Global Protect Access routes

SutareMayur — Thu, 30 Apr 2020 10:25:42 GMT

Hi @gpandya ,

Specifying host/network under GP gateway --> Agent --> Split Tunnel --> Access route is the only configuration that is used to route traffic through Global Protect and for these host/networks, routes gets added on client system post connecting GP. No other criteria/configuration is required.

Kindly check this configuration again. And also try to connect GP VPN on other client system and check if you see same observations.

Mayur

Re: Global Protect Access routes

fatboy1607 — Thu, 30 Apr 2020 10:26:09 GMT

what other routes do u see on client ?

check gp client routing table ?

how are u advertising routes to client ?

Re: Global Protect Access routes

gpandya — Thu, 30 Apr 2020 10:41:48 GMT

Thanks Mayur & Mandar

We have set route in "Access route" TAB only.

Let say for example, we have defined 192.168.0.0/16 subnet in access route but we are getting multiple subnets in client machine like 192.168.1.0/23 and so on. There is no problem with connectivity of routes. Just we are getting multiple subnets on client machines when we do "Route Print"

Re: Global Protect Access routes

SutareMayur — Thu, 30 Apr 2020 10:58:52 GMT

@gpandya,

Whats your PANOS and GP version?

Mayur

Re: Global Protect Access routes

gpandya — Thu, 30 Apr 2020 13:09:20 GMT

Its

GP Version 5.1.2-25
PANOS - 9.1