I’ve got a single public IP address, which is used for GlobalProtect SSL VPN. I also want use this single public IP address to allow inbound static NAT to a SSL web server on my LAN.
Using GP 4.0.5
When I do this, the GlobalProtect SSL VPN client stops working and starts redirecting the traffic to the SSL web server. Is there a way around this so that both the GlobalProtect SSL VPN client and SSL web server will work on a single public IP address without having to use a separate IP address?
Thanks in advance!
Solved! Go to Solution.
there's no "clean" way to accomplish this since you're trying to share the same port between 2 services
one workaround is to enable the gateway on a loopback interface, then set up NAT to redirect a 'different' external port (eg. 5000) to 443 onto the loopback. that way your GP client will connect to the gateway via port 5000 which the firewall will NAT to 443 on the loopback
portal may only be accessible from LAN as you can't use the same trick for portal
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!