Global Protect Always On and stopping local network access in event of failure

[a.jones]

Hi All,

Is it possible to stop a device from connecting to the local network if the Global Protect Gateway fails? I have a question from a customer that has an Always On Pre-Logon environment and wants to ensure the connection defaults to a fail-closed mode with no access to the local netwok - although it must allow for initial connections to networks made by Captive Portals?

Regards

Adrian

[BPry · Accepted solution]

@a.jones,

What you are looking for is the 'Enforce GlobalProtect for Network Access' option. 

[a.jones]

Thanks BPry.

Amazing how many times I've viewed that App list and not seen that line. That is what I needed.

Regards

Adrian