For details on cookie usage on our site, read our Privacy Policy
Enforcing Global Protect Connection Issue
- LIVEcommunity
- Discussions
- General Topics
- Enforcing Global Protect Connection Issue
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-20-2021 05:28 AM
Hi All,
Has anyone who's implemented the Enforce Global Protect connection option had issues permitting remote support applications?
I've tried adding the required wildcarded FQDN's to the Global Protect Portal under App Configurations but no joy yet.
Just wondering if anyone else has had a similar issue?
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-28-2021 08:47 AM
Just FYI, the FQDN exclusions aren't supported in anything prior to 5.2, the only exclusions you can configure prior to 5.2 is IP based exclusions.
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-20-2021 06:53 AM
What exactly are you trying to do, have it bypass the tunnel?
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-20-2021 07:11 AM
Correct, my thinking is that if an end user cannot connect to the Gateway for whatever reason but the Global Protect Client is still preventing internet access we'd be unable to provide them with remote support unless we used the static disable passcode.
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-26-2021 09:17 AM
Commenting here to follow.
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-26-2021 01:59 PM
So I've only done this in my lab, but it appears to work as I would expect without any issues and I can access allowed resources without issue. I think the difference here though is that you're trying to access the machine remotely through this method right? So you're trying to allow access to some service such as logmein or something like that so you can then remote into the machine?
- Prisma SD-WAN vs PAN-OS SD-WAN - Focused on SASE in General Topics
- Certificate SSL Self Signed Expired GP SSL-TLS Profile Global Protect in General Topics
- User unable to connect to VPN portal address after USMT data transfer to new PC in GlobalProtect Discussions
- checking reason of tunnel being down in prisma sase in Prisma Access Discussions
- MS-SQL Issues with 8656-7766 Dynamic Update? Citrix-Director seems to have broken it in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
