Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
10-25-2017 03:47 PM
HI.
We run global protect for a reasonable number of remote users on our PA3050's without much in the way of issues.
One thing which pops up, though, is that our Virus management server (McAfee) gets hugely confused about which machines are on which IP address.
We've done a little digging, and it apepars to be related to te fact that all machines conencting via global protect appear to get the same virtual MAC address for the tunnel interface - and this reports to the virus server.
Which means, of course, every time someone establishes a new VPN connection the virus server gets a new hostname assigned to the MAC address - which is normally wrong.
Does anyone know if there is any way I can force each new connection on GP to get a unique virtual MAC on the tunnel interface on the local PC?
If so, how? I've had a poke around and I can't seem to find any way to do it.
Thanks
10-26-2017 12:57 AM
Some from the engineering team should be able to comment on whether all virtual interfaces get same mac address as per design.
As far as configuration is concerned, I don't believe there is a setting which allows you to force unique mac addresses or assign them statically.
10-26-2017 12:57 AM
Some from the engineering team should be able to comment on whether all virtual interfaces get same mac address as per design.
As far as configuration is concerned, I don't believe there is a setting which allows you to force unique mac addresses or assign them statically.
12-20-2017 04:05 PM
@mgarg wrote:Some from the engineering team should be able to comment on whether all virtual interfaces get same mac address as per design.
As far as configuration is concerned, I don't believe there is a setting which allows you to force unique mac addresses or assign them statically.
That was what I was afraid of.
Thanks anyway.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
