GlobalProtect Portal HTTP redirect

[oschuler]

Dear all,

We're currently testing the GP VPN solution before we roll it out to our notebooks. We noticed that we can only access the portal homepage if we explicitly enter "https://<portal-url>". It doesn't work with just "<portal-url>" there HTTP would be used.

Is there any way to activate an HTTP to HTTPS redirect for the GP portal?

Thanks,

Oliver

[zarina · Accepted solution]

Oliver,

We do not have an option to redirect the http page to https.

Thanks,

Sri

[oschuler]

Okay, thank you for the clarification, Sri.

[pkonitz]

Sorry for refreshing this thread

but

There was such an option for PA 4.x

What is more - in 5.0.10 there is still some kind of information about this functionality

show global-protect-gateway gateway name GW1

GlobalProtect Gateway: GW1 (0 users)
Tunnel Type          : remote user tunnel
Tunnel Name          : GW1-N
        Tunnel ID                 : 1
        Tunnel Interface          : tunnel.51
        Encap Interface           : loopback.51
        Inheritance From          :
        Local Address             : 194.0.220.51
        SSL Server Port           : 443
        IPSec Encap               : yes
        Tunnel Negotiation        : ssl
        HTTP Redirect             : no
        UDP Port                  : 4501
        Max Users                 : 0
        IP Pool Ranges            : 10.140.1.2 - 10.140.1.254;
        IP Pool index             : 0
        Next IP                   : 0.0.0.0
        DNS Servers               : 10.128.1.240
                                  : 10.128.2.240
        WINS Servers              : 0.0.0.0
                                  : 0.0.0.0
        DNS Suffix                :
        Access Routes             : 0.0.0.0/0;
        VSYS                      : vsys1 (id 1)
        SSL Server Cert           : Portal51
        Auth Profile              : SZP_LDAP
        Client Cert Profile       :
        Lifetime                  : 86400 seconds
        Idle Timeout              : 86400 seconds

So my question for now is:

- is this a limitation of the new version of GlobalProtect client?

- is this functionality again on the roadmap? its quite useful

regards

Przemek

[schatterjee]

Hi Team,

DO we have this feature on 5.0 and onwards.

I do see that the HTTP redirect is turned off in my current configuration.

Need to know how can we enable this option. I did not found any such option on CLI or GUI.

Please assist.

Regards,

Sabyasachi

[pkonitz]

more and more clients ask about it and what can I say ...

Team

please consider it as feature request and you will see how many clients sign up this.

regards

[MacBartkowiak]

Helo,

Just refreshing the topic. We have a customer facing this issue/problem/inconvenience. They have to directly enter https://<portal-name> 

Without https web page is showing that the application <web-browsing> was blocked.

Any idea?