Global Protect internal host detection is not working, when user is in branch office connected via to site to site vpn.

[AsilKewal]

Case:
Global Protect VPN is enabled in HO PA220.
BO also have PA220, HO and BO connected over site-to-site vpn, 
If user is connected to HO LAN, internal host detection works and identify it as Internal corporate network.

And if user is connected to BO LAN, it just connects to GP VPN even though site to site vpn is active and internal host detection does't work.

[JayGolf]

Hi @AsilKewal ,

On the branch GP portal config, what do you have set for the "connect method"? 

[AsilKewal]

Hi Jaygolf,

GP is only configured at HO, however there is a site-to-site tunnel between HO and BO.
users gets connected GP to HO as external, internal host is not getting recognised over site-to-site tunnel.

[AsilKewal]

Hi,
This issue is resolved, there was a DNS host name resolution issue at BO which is now sorted.
GP client now detecting BO network as "Corporate Internal Network"