For details on cookie usage on our site, read our Privacy Policy
DNS Resolution stops after ~10s after connecting with GlobalProtect
- LIVEcommunity
- Discussions
- General Topics
- DNS Resolution stops after ~10s after connecting with GlobalProtect
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
DNS Resolution stops after ~10s after connecting with GlobalProtect
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-13-2020 10:37 AM
Hello...
Many of my end users are now reporting that after approximately 10 minutes of logging to VPN using the GlobalProtect client they lose DHS resolution to internal and external resources. For example, when this happens. Users cannot access or even ping a server, by either its FQDN or by IP number. In addition, users also report they cannot access external resources such as Google. However, the GP client will still show "Connected." If the user disconnects/reconnects the GP client DNS resolution is restored. Then this cycle starts over again. This started several weeks ago and to my knowledge we have not made any changes to either the GP client or the FW. A support case, so far, has not resulted in a solution.
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-14-2020 06:39 AM
Yes we are allowing split tunneling. Nothing in the traffic logs found so far. Tech support suggests putting the firewall into debug mode, Wireshark a client and see if we can recreate the issue.
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-15-2020 05:51 AM
Hi @aimsnss ,
Which DNS server you have configured under global protect settings? Is it internal?
Mayur
- Mark as New
- Subscribe to RSS Feed
- Permalink
02-16-2020 10:47 AM
Yes, confirmed. Internal DNS address is in play.
- Globalprotect vpn prompting user principal name (upn) instead of domain-name/userid format and not connecting. in General Topics
- GlobalProtect Gets White Screen at CBL (v. 6.0.4-c26) in GlobalProtect Discussions
- Some users not able to connect to GlobalProtect in GlobalProtect Discussions
- GlobalProtect fails connection in GlobalProtect Discussions
- SSL routines::unsafe legacy renegotiation disabled in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
