Global protect Always On - External connections

[Metgatz]

Global protect Always On - External connections

Hello LIVE community!

I hope you are well.

I have had to configure Global Protect on several occasions but I have a question that I am being asked in this case:

Is it possible in S.O windows to use the Always On, filtering that only connects to GP when it detects the connection in an External way, home-office, cafe, client offices,etc, but when it is in the HQ, it does not connect to GP.

Is it feasible and what would be the important recommendations to consider to implement it?

Thanks

I remain attentive

Best regards

[rmfalconer]

Are you referring to something like internal host detection? GP will do a lookup to see if a host resolves to determine if its internal or external.

[Metgatz]

Yes, something similar. Is there any way that only when this external connects and when this internal, does not connect, validate that this intenro but not connected to GP?

Thanks for your time and cooperation

[rmfalconer]

Yes, that's what Internal Host Detection does. The name is generic but that's actually a feature in GP.

Advanced Internal Host Detection (paloaltonetworks.com)

[Metgatz]

Thanks @rmfalconer 

The best method for this is use pre logon always on that right ?