ASK: PAN-GP Clients can't reach each other

[cragasyah]

Hi All,

My GPClients can't communicate to each other, while the intrazone policy is permit.

Anyone has any idea about it?

[reaper]

Have you tried adding a route for the GP subnet directed at the tunnel interface ?

Is there a NAT rule that could accidentally pick up on the intrazone traffic?

if you set up a packet-diag and trace the global counters, you should get meaningful feedback on what's happening to your packets

[Mick_Ball]

Our GP clients can communicate with each other.

we have a security policy      "trusted zone" to "globalprotect zone"

GP client traffic hits the trusted interface and does a "U" turn.

not sure what your zones are called but if you get stuck let me know your zones and i will advise on policy thingy...

[cragasyah]

Hi MickBall, thank you for your confirmation, and advise. Let me try first ya.

Once more, thank you