Global Protect DNS Suffix Not Propogating to Client

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Global Protect DNS Suffix Not Propogating to Client

L1 Bithead

Hi,

 

I have a strange issue where my Global Protect SSL Client connects to the firewall with no issues.  I get the IP, the routes and the DNS servers but I don't get anything listed in the DNS Suffix entry.  I have configured the DNS Suffix correctly under 'Global Protect Gateway', 'Client Configuration', 'Network Settings' and can even see the DNS Suffix being received from the agent during my agent debug when trying to connect but nothing shows up in IPCONFIG.

 

Any ideas?

 

Regards

 

Mike

5 REPLIES 5

L3 Networker

Try this:

 

> Run gpedit.msc

> Browse Local Computer Policy

> Computer Configuration

Administrative Templates -> Network -> DNS Client

Enable "Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries"

 

Please let me know if this helps

Hello,

Do you have the domain listed under the radius profile?

 

Device->Server Profiles-> RADIUS

 

Then see if the domain is listed there. This did the trick for me.

 

Regards,

Unfortunately no difference

Hi MHaran,

 

did you search Windows logs? Could it be that some other software is protecting / preventing GP Agent to set DNS suffix to the system? Is your GP Agent running as a service as well on that Windows host? What is the version of Windows you are having as hosts?

 

L4 Transporter

Hi,

 

Did you had a chance to look at https://live.paloaltonetworks.com/t5/Management-Articles/DNS-Suffix-is-not-Listed-under-GlobalProtec...

 

If this is already verified, could you check if the issue is specific to any Client OS/ GP version?

 

BR

  • 5959 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!