Query on GlobalProtect SSL VPN

[Farzana]

Hello,

I’ve got a single public IP address, which is used for GlobalProtect SSL VPN. I also want use this single public IP address to allow inbound static NAT to a SSL web server on my LAN. 

Using GP 4.0.5

When I do this, the GlobalProtect SSL VPN client stops working and starts redirecting the traffic to the SSL web server. Is there a way around this so that both the GlobalProtect SSL VPN client and SSL web server will work on a single public IP address without having to use a separate IP address?

Thanks in advance!

[reaper · Accepted solution]

hi @Farzana

there's no "clean" way to accomplish this since you're trying to share the same port between 2 services

one workaround is to enable the gateway on a loopback interface, then set up NAT to redirect a 'different' external port (eg. 5000) to 443 onto the loopback. that way your GP client will connect to the gateway via port 5000 which the firewall will NAT to 443 on the loopback

portal may only be accessible from LAN as you can't use the same trick for portal