Global Protect Connected but no web access

[cgosorio]

I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home WiFi. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the browser does not show anything. When I disconnect from the VPN, I am not able to connect to the server anymore (as expected) and I able to access the web. This happens in a linux machine with Ubuntu 20.04.4 LTS. In another machine with MacOs Catalina, using the Global Protect client I can connect the VPN and access the web and the servers via ssh. Anybody experimenting this kind of behaviour? Any solution or suggestion that can help to identify the problem?

[cgosorio · Accepted solution]

I have been able to solve the issue myself. Apparently the problem is due to the GlobalProtect script unable to change /etc/resolv.conf in Ubuntu 20.04 (this may be because in Ubuntu is not a regular file, but a link to another file). So after connecting to the VPN the DNS address there were not changed to point to the DNS inside the organization. Now, I have a couple of scripts, one to connect, one to disconnect, that manage the connection and the change of /etc/resolv.conf.

[Carrey.Zou]

GlobalProtect DNS distribution  /run/systemd/resolve/resolv.conf，default dns link /run/systemd/resolve/stub-resolv.conf，Relink,ok

[ndro]

i need some clarity on these solutions.
im' no longer able to connect as of fairly recently.

here is my Ubuntu 20.04.4 LTS setup:
✓ user@computer:~ $ ls -lh /etc/resolv.conf
lrwxrwxrwx 1 root root 39 Jun 10  2019 /etc/resolv.conf -> ../run/systemd/resolve/stub-resolv.conf

$ ls -lh /run/systemd/resolve/
netif/            resolv.conf       stub-resolv.conf  
 $ ls -lh /run/systemd/resolve/resolv.conf /run/systemd/resolve/stub-resolv.conf
-rw-r--r-- 1 systemd-resolve systemd-resolve 634 May 17 10:08 /run/systemd/resolve/resolv.conf
-rw-r--r-- 1 systemd-resolve systemd-resolve 717 May 17 10:08 /run/systemd/resolve/stub-resolv.conf

[ndro]

or anyone fighting this problem, as PA has not fixed it for months, this 3rd party client worked for me the very first try, even with our Azure SSO:
https://github.com/yuezk/GlobalProtect-openconnect