flush-dns flag in GlobalProtect registry resets to "no"

[arvesynd]

I'm currently having an issue with users having to do "ipconfig /flushdns" in order to gain access to certain network resources when connecting to VPN.

There is a registry entry called "flush-dns" located under HKEY_CURRENT_USER\Software\Palo Alto Networks\GlobalProtect\Settings which I thought I could use in order to have the client perform a DNS flush each time it changes gateway.

This is described in this guide: https://www.paloaltonetworks.com/documentation/62/globalprotect/globalprotect-admin-guide/set-up-the...

When set to "yes" it automaticly reverts to "no" when the client is connected.

Is the proper registry name flushdns or flush-dns? Is this supposed to still work with GlobalProtect 3.x?

[reaper · Accepted solution]

this is a setting you can change in the agent config: 

[J.Schroth]

The image is missing. Can you repost please? I do not see any "flush-dns" option in the app settings in Panorama.

[reaper]

this is a post for PAN-OS 6.2, this setting does not exist anymore 🙂 

it's remnants are still visible in the agent config, but it has been deprecated

what are you looking for exactly ?