No internet access after connecting to Gobal Protect in Mac

[LThankachen]

Hello Friends, please anyone, can you help to solve the below issue. I am not able to connect the internet after connecting to GP, version 4.1.8 in Mac Mojave 10.14.3. In windows it works fine. regards, Liju

[tjleonard]

I'm still have the same problems as well...I've even replaced the firewalls from Palo 3020 to Palo 850...

[hoyomi]

It could be anti-virus app blocking the network traffic. In my case, it was Kaspersky. As soon as I switched to Norton, everything works fine now.

[tjleonard]

Not AV in my case.  I actually don't lose network connectivity, I lose DNS and connectivity to where the VPN is.  When you're connected to the VPN, DNS comes from across the tunnel and therefore, that stops working.  GP says you're still connected the entire time.  I also can easily trigger it by mapping an SMB share.  It maps, I go to open the first folder level and it's over.

[Kenjutsu]

I have no AV installed. Just a fresh/clean install of Mojave 10.14.6 

[Morzen]

Did you mange to get a solution , I am having the same problem

[tjleonard]

Unfortunately no. I see people mentioning it in many locations but no one posts the solution they find. I find that if I go to a DFS share via SMB, it'll trigger 10/10 times. If I go to just a normal file share via SMB, it'll only trigger about 3/10 times...

[Morzen]

Same with me , changing the DNS did not work neither ....I don't know if anyone from PaloAlto can jump in ?

[tjleonard]

I can even add that it doesn't happen on a full tunnel VPN, only split-tunnel VPN and I have replaced our firewalls since we started having the problem (had a 3020, went with 850). GP version doesn't matter, I've used dozen's of different versions since this came out, and I've even disabled IPv6 as I found on a forum and didn't have any luck. 

I'm sure there are other things I'll remember and post here. I'm really interested in a solution, but not had time to call Palo and spend hours and hours on the phone when it only affects Macs (and we only have 6 mac's, and I'm the only one that access SMB shares).