topic Re: Zscaler and Global Protect Compatability in General Topics

Zscaler and Global Protect Compatability

AvinashKukkapalli — Thu, 24 Sep 2020 16:17:18 GMT

Does anyone come across issues when we are running Zapp and Global Protect client together on MAC.

We have GlobalProtect with split tunnel mode and we are in phase of migrating to Zscaler solution. We deployed Zscaler with ZIA enabled to for set users and people started complaining about performance issues.

After couple of tshoots we decided to log out from GPVPN and give a try. Right after user log out from GPVPN everything looks good.

Zscaler suspect it could be a VPN conflict and traffic routing is effecting because of this.

Would like to hear if anyone of you come across this issue.

Re: Zscaler and Global Protect Compatability

JoergSchuetter — Thu, 24 Sep 2020 16:50:48 GMT

Hello

Are you using Tunnel-2.0 w/ Zscaler?

Did you add all ZENs to the split tunnel?

Re: Zscaler and Global Protect Compatability

AvinashKukkapalli — Thu, 24 Sep 2020 16:54:53 GMT

@JoeR Yes we are using tunnel 2.0 .

In our existing Global protect split tunnel we accept only RFC1918 and very few specific Public iP traffic so all ZEN related traffic will leave locally from user machine

Re: Zscaler and Global Protect Compatability

JoergSchuetter — Fri, 25 Sep 2020 19:26:21 GMT

Hello @AvinashKukkapalli

We had the same issue. For one, it could depend on the software version of Zapp (ask your Zscaler TAM). In addition to this, it was also caused by interface priority (especcialy in combination with HyperV).

Re: Zscaler and Global Protect Compatability

LenaRodgers — Sat, 03 Oct 2020 07:11:41 GMT

@AvinashKukkapalli wrote:
Does anyone come across issues when we are running Zapp and Global Protect client together on MAC.
We have GlobalProtect with split tunnel mode and we are in phase of migrating to Zscaler solution. We deployed Zscaler with ZIA enabled to for set users and people started complaining about performance issues.
After couple of tshoots we decided to log out from GPVPN and give a try. Right after user log out from GPVPN everything looks good.
Zscaler suspect it could be a VPN conflict and traffic routing is effecting because of this.
Would like to hear if anyone of you come across this issue.

having same issue