- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
SNI for GlobalProtect
- LIVEcommunity
- Collaboration
- Discussions
- General Topics
- SNI for GlobalProtect
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
SNI for GlobalProtect
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
10-14-2020 09:53 AM
Hi,
is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?
I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
10-16-2020 04:20 AM
is a "bump" allowed? ^^
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
10-16-2020 07:28 AM
I also try to do it. I have 3 Palo's both with a GP gateways setup. I try to find the best way, still looking for a better solution.
https://movieboxpro.info/ https://movie-box.info/ https://cshare.mobi/
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
10-16-2020 12:39 PM
The firewall natively doesn't support this feature. You can reach out to your SE to get a feature request put in for this to be considered going forward.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
03-05-2021 02:41 PM
I am following this thread, facing same thing.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
03-09-2021 04:00 AM - edited 03-09-2021 04:01 AM
I couldn't solve this problem through the firewall and I still not find an alternative. I'd be grateful for your help.
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
04-04-2021 02:45 PM
I used a reverse proxy for the portal which works fine and entered a fqdn in the portal for the gateway...
unfortunately the globalprotect client simply resolves the IP and doesnt pass the SNI so it could be passed through a reverse proxy...
but maybe a clientless connection would work... might try that
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
11-12-2021 12:38 PM
i am also trying to do the same thing, which is failed
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
