topic Re: no internet access when VPN Ipsec Xauth PSK is connected in General Topics

no internet access when VPN Ipsec Xauth PSK is connected

Chava.Dominguez — Fri, 03 Sep 2021 04:24:07 GMT

VPN connection by Ipsec Xauth PSK, not permit access to internet when the device is connected to VPN

Re: no internet access when VPN Ipsec Xauth PSK is connected

S.Cantwell — Fri, 10 Sep 2021 00:50:16 GMT

Check what your default gateway or next hop in your agent. I have seen GP users get a virtual pool address, and then, their default gateway, is the next available IP from the virtual pool. Look at logs on the FW to see if you show any denies or similar in traffic logs.

It is best to consider getting a license for GP on the FW for allowing mobile devices to connect. I truly have not had much luck with the Group and XAuth.

Good Luck.

Re: no internet access when VPN Ipsec Xauth PSK is connected

BPry — Fri, 10 Sep 2021 03:15:47 GMT

@Chava.Dominguez,

Without seeing the logs or knowing the configuration this is hard to troubleshoot. I'd look at the logs as @S.Cantwell mentioned and see if you even see any traffic reaching the firewall from the client or not. In addition, ensure that you have interzone-default logging enabled to view denied traffic so it actually shows up in the logs.

I'll also state that different devices do this very differently. Android device to android device behavior different, an iPhone behaves differently than Android, and it's just generally not worth it. As @S.Cantwell mentioned once again, just buy a GlobalProtect subscription so that you have access to the mobile app.