Global Protect Access routes

[gpandya]

Hi,

I have question for access routes. We have configured global protect and advertised only one access route however after connecting to global protect VPN, we can see multiple access routes in client machine. Is there any other criteria for access routes to be advertised?

[SutareMayur]

Hi @gpandya ,

Specifying host/network under GP gateway --> Agent --> Split Tunnel --> Access route is the only configuration that is used to route traffic through Global Protect and for these host/networks, routes gets added on client system post connecting GP. No other criteria/configuration is required.

Kindly check this configuration again. And also try to connect GP VPN on other client system and check if you see same observations.

Mayur

[fatboy1607]

what other routes do u see on client ?

check gp client routing table ?

how are u advertising routes to client ?

[gpandya]

Thanks Mayur & Mandar

We have set route in "Access route" TAB only.

Let say for example, we have defined 192.168.0.0/16 subnet in access route but we are getting multiple subnets in client machine like 192.168.1.0/23 and so on. There is no problem with connectivity of routes. Just we are getting multiple subnets on client machines when we do "Route Print"

[SutareMayur]

@gpandya,

Whats your PANOS and GP version?

Mayur

[gpandya]

Its

GP Version 5.1.2-25
PANOS - 9.1