SNI for GlobalProtect

[CLIq]

Hi,

is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?

I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.

[CLIq]

is a "bump" allowed? ^^

[FredJD]

I also try to do it. I have 3 Palo's both with a GP gateways setup. I try to find the best way, still looking for a better solution.

 https://movieboxpro.info/  https://movie-box.info/  https://cshare.mobi/ 

[BPry]

@CLIq,

The firewall natively doesn't support this feature. You can reach out to your SE to get a feature request put in for this to be considered going forward. 

[movieboxproappapk]

I am following this thread, facing same thing.

[RosieRosie]

I couldn't solve this problem through the firewall and I still not find an alternative. I'd be grateful for your help.

[CLiqr]

I used a reverse proxy for the portal which works fine and entered a fqdn in the portal for the gateway...

unfortunately the globalprotect client simply resolves the IP and doesnt pass the SNI so it could be passed through a reverse proxy...
but maybe a clientless connection would work... might try that