On-demand GlobalProtect and Mapped drives

[GeorgiosFakis]

Hello all ,

Having issues with some users where they have mapped drives but after they connect to global protect they don't work.

If they unmap and they map again it works .

When doesn't work after connecting to globalprotect if they ping the IP of the server that they have the mapped drive it works but SMB it doesn't .

We have on-demand globalprotect, SSO disabled of course and we allow netbios, SMB and I don't see any blocked traffic.

I have tried to search that and I don't want to say to the customer to fix that with scripts net use because all users are using their own shared folders.

[Jason.Holcomb]

I am having the exact same issue but mine is "well Sonic Firewall works". Makes it hard to sell a new VPN solution to management when things like this don't work.

[Jason.Holcomb]

So I want to share that I believe we have found the solution for mapping our personal drives without having to have the pre-logon. I had one of my admins create a .vbs file that will pull the home drive mapping info from AD. then we added a registry key into the install package to point to the .vbs file to execute this post-vpn-connect. https://docs.paloaltonetworks.com/globalprotect/7-1/globalprotect-admin/set-up-the-globalprotect-inf...

[naddison]

Hi George - did you ever resolve this? Same problem over here. 

[GeorgiosFakis]

Hi ,

We found around 100 users having this issue where mapped drives had their COMPUTER name like alias and linked to one of the servers for personal host space . Basically , helpdesk instructed them how to change that so the mapped drive have a normal path .

I don't know how it was working before with Juniper Pulse but with GP we had issues. All the other mapped drives that was from the AD policy were ok after connecting to GP .

[Leoben]

Having the same issue here with PanOS 9.1.5 and GP 5.2.2.

We are replacing a Sophos firewall and this just worked before it's hard to sell a PAN solution with this kind of issues.