- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
09-09-2021 05:37 AM
Is there anybody working from Thailand using Global Protect vpn?
I heard that the country can block vpn connection. While my company's configurations allow me working from Thai.
I'm planning to relocate and want to make sure i can work from there.
Would be grateful for any information, maybe you heard anything from somebody concerning Thailand or nearest countries. Or which difficulties you faced..
Thank you in advance
09-09-2021 05:00 PM
I was reading and there are some well known VPN proxy clients/apps that could be restricted, but I have not heard of GP being denied. We have users in APAC without issue.
09-10-2021 12:23 AM
The easiest way to block VPN clients is to block IPsec. I while a go was working for customer that had one user travaled to China and had issues connecting to their VPN. We concluded that China was filtering the IPsec completely.
Even that I known I may be wrong, but it is hard for me to imagine there is a way to filter GlobalProtect running in SSL mode. Without SSL decryption (which I don't believe they can achive) GP over SSL will mix with the rest of the web browsing traffic and cannot be identified easily.
GlobalProtect will automatically fallback to SSL when it cannot connect over IPsec.
In addition it is easy to detect and block commercial VPNs, even with SSL, because the hostname (and IP address) you are connectiong are in most cases well known and categorized.
My guess is that you should not have any issues with GlobalProtect:
- when running over SSL it is hard to identify as VPN traffic
- as it is not commercial product, it shouldn't be categorized as VPN by filtering systems
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!