SNI for GlobalProtect

[CLIq]

Hi,

is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?

I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.

[CLIq]

is a "bump" allowed? ^^

[BPry]

@CLIq,

The firewall natively doesn't support this feature. You can reach out to your SE to get a feature request put in for this to be considered going forward. 

[CLiqr]

I used a reverse proxy for the portal which works fine and entered a fqdn in the portal for the gateway...

unfortunately the globalprotect client simply resolves the IP and doesnt pass the SNI so it could be passed through a reverse proxy...
but maybe a clientless connection would work... might try that