GlobalProtect and Cisco IPCommunicator

[rich.hansen]

Recently rolled out GP to our users. We have some that have issues using IPCommunicator while using GP. Anybody know of anything to help these users? They are able to ping TFTP servers.

Users are in UK - CallManager Cluster is in US (Wisconsin)

[mmmccorkle]

Rich.hansen,

Have we narrowed down the relevant traffic logs to see what the firewall is doing with that traffic?

If so, please provide us with this information.

Thanks!

Please do not forget to mark and 'Helpful' or 'Correct' replies.

[pulukas]

Multiple vpn clients frequently will not work at the same time as they are both trying to create software network interfaces and control local routing.

Specifically both of the clients would need to be configured for split tunnel or they really cannot work together most of the time.  when your client is non-split tunnel it forces every stream from the workstation into that tunnel.  This creates a conflict between the two that is nearly impossible to resolve.

If one is non-split tunnel that should be initiated first, then the split tunnel and they might play nice together.

[rborda]

Hi Rich,

Make sure the IP Communicator's IP (Either static or via dhcp) is not overlapping with the IP pool configured on the GP gateway?

If the IP's assigned to your GP virtual adapter and your softphone are on the same subnet you might have issues.

Also, make sure that any ip/network the IP communicator needs to reach (tfpt, call manager, other softphones etc) are not overlapping with IP pool from GP gateway.

Could you provide more information on what the client is experiencing? Ex: Failing to register; calls dropping , intermittent issues , etc.