We have a intermittently issue with GlobalProtect client and the local DNS resolution. We have conigured local dns servers on network services and we have established "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)": YE
This configuration is working fine, but intermittently, the local DNS servers are not available y the users can not acces to local resource by FQDN but it is possible by ip.
Could anybody help us with this issue?
Do the logs on the PAN show any reason as to why this traffic is blocked? I often see traffic to external DNS services such as 220.127.116.11, while I block it, it doenst disrupt the end user experiences. Check the unified logs to see if something is getting blocked or using the incorrect DNS server.
Just a thought.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!