GlobalProtect with Vodafone and Telecom

[HF_Martini6]

One of our Colleagues isn't able to connect from his home in Germany to our Gateway in Switzerland when using the GlobalProtect Client (V. 5.1.0-75) when using either his Home Internet Connection (via WiFi) nor when using a Mobile Hotspot (Vodafone Mobile on iPhone), are there any Limitations or issues known with this Combination?

[SutareMayur]

@HF_Martini6Hello,

There are no limitations as such.  What do you see in the logs on firewall ?

- Mayur

[HF_Martini6]

unfortunately i do not have access to any Firewall Logs or Settings, i can only see what's going on in the Logs of the Machine my Colleague is using.

[SutareMayur]

Is there any chance if someone can check logs on firewall? Check if request is hitting firewall and it is getting allowed.

Mayur

[HF_Martini6]

i'll check with our iT Security Departement aka "the Dungeon Keepers"

[Robert2]

Hi,

I have a similar issue with Global Protect with a user on Vodafone, Germany. 

Did you ever fix this ?


 

[BPry]

@Robert2,

You might get more traction on your question opening a new discussion. As @SutareMayur mentioned in this thread, the first place to look would be the firewall logs to ensure the traffic is evening hitting your device. 

[reaper · Accepted solution]

I've had an issue issue with these providers where they were offering IPv6 at the customer level and applying NAT64 once connections left their network. The additional ipv6 header was wreaking havoc on GP connectivity and we ended up needing to lower the MTU for these users to be able to get connected, might be worth checking if you have a similar issue

[Robert2]

It turns out this was a weird MTU issue, Manually decreasing the MTU on the NIC/IP stack via powershell, fixed end to end traffic.

Thanks Reaper