10-11-2021 09:21 PM
Hi,
I am using GP-5.2.6 with split tunnel, When ever the tunnel configured DNS not resolving a hostname, The traffic is not falling back to local DNS server configured in physical adaptor. Actually this is not working in all 5.2.x series.
But the same scenario working in GP-5.1.8(5.1.x). Palo Alto has introduce split-DNS feature from 5.2 series, Is it anything related with this issue.
10-17-2021 05:24 AM - edited 10-17-2021 05:28 AM
You can test it on test users as it could be related for domains that are added to not enter the split tunnel:
Also see this option "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)" as it can also be related to your issue to test changing it for couple of test users that you made specific portal app config to be assigned based on AD user/group:
if needed upgrade to the latest globalprotect version.
10-17-2021 06:41 PM
Hi Nikolay,
I already Did, "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)" without this option in GP 5.1.x the DNS fall back to local DNS, But in 5.2.x it is not. But I enable "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)". It is working fine.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
