GlobalProtect Cloud Services Route Precedence

cancel
Showing results for 
Search instead for 
Did you mean: 

GlobalProtect Cloud Services Route Precedence

L1 Bithead

We have had overlapping subnet scenarios where someone is connecting using GlobalProtect Cloud Services from a subnet that overlaps our internal subnet and, as they have a more specific route, access to internal resources is failing as the taffic is being routed via the local router instead of over the VPN due to the more specific route. Due to the size of our internal network, adding more specific routes for all of our subnets isn't really an option and this could be undone anyway with a more specific route.

 

Does anyone know a way to force all internal traffic down the VPN instead of following more specific routes?

 

NOTE: GlobalProtect Cloud Service has changed to Prisma Access.

10 REPLIES 10

Hello,

The PAN's can do this nativly, I should have read more rather than pasting :). Check this out:

 

https://live.paloaltonetworks.com/t5/Featured-Articles/DotW-Help-with-IPSec-Proxy-IDs-with-overlappi...

 

Does this more closely resendble the scenario?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!