GlobalProtect says "Connected" to quickly........

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

GlobalProtect says "Connected" to quickly........

L3 Networker

Someone can stop me if it's meant to do it this way, but if feels like a bug that needs fixed.

 

GlobalProtect 5.0.4-16

PanOS 9.0.1

HIP Checks in place

 

Scenario:

Using HIP checks to limit scope of connectivity to internal network.

 

Issue:

Let's say that one of my HIP checks is to look and make sure that widget.exe is running on a PC.  I connect to GlobalProtect and it says "connected" and then it does the HIP check.  I get my pop up and it says "congrats connected, you're not an idiot and know how to set this up".

rtaImage.png

 

Now let's say that I disable widget.exe and reconnect. Again, I connect to GlobalProtect and it says "connected" and then it does the HIP check.  I get my pop up and it says "You need to have widget.exe running".

 

My issue is that It still says "connected" as pictured and above and I still get an IP address from the pool.  I'm not actually connected and can't get into any internal resources, but this still feels bad.  Additionally it gives the end user a false sense that they are connected when in fact they are not.

2 REPLIES 2

Cyber Elite
Cyber Elite

@Shawverr,

So yes and no.

You need to actually connect to the gateway before the agent does the HIP check, so the 'Connected' message is valid well before you pass HIP checks and are actually granted network access. It might be a case to suggest updating the status of the 'Connected' message to align more with the thought of being connected to internal resources instead of just connected to the gateway though. 

@BPry Yeah, it feels like it should (or you should have the option) to "disconnect" anyone who doesn't pass the HIP check.

  • 1928 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!