Global Protect Connected but no web access

[cgosorio]

I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home WiFi. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the browser does not show anything. When I disconnect from the VPN, I am not able to connect to the server anymore (as expected) and I able to access the web. This happens in a linux machine with Ubuntu 20.04.4 LTS. In another machine with MacOs Catalina, using the Global Protect client I can connect the VPN and access the web and the servers via ssh. Anybody experimenting this kind of behaviour? Any solution or suggestion that can help to identify the problem?

[cgosorio · Accepted solution]

I have been able to solve the issue myself. Apparently the problem is due to the GlobalProtect script unable to change /etc/resolv.conf in Ubuntu 20.04 (this may be because in Ubuntu is not a regular file, but a link to another file). So after connecting to the VPN the DNS address there were not changed to point to the DNS inside the organization. Now, I have a couple of scripts, one to connect, one to disconnect, that manage the connection and the change of /etc/resolv.conf.

[Carrey.Zou]

GlobalProtect DNS distribution  /run/systemd/resolve/resolv.conf，default dns link /run/systemd/resolve/stub-resolv.conf，Relink,ok

[ndro]

i need some clarity on these solutions.
im' no longer able to connect as of fairly recently.

here is my Ubuntu 20.04.4 LTS setup:
✓ user@computer:~ $ ls -lh /etc/resolv.conf
lrwxrwxrwx 1 root root 39 Jun 10  2019 /etc/resolv.conf -> ../run/systemd/resolve/stub-resolv.conf

$ ls -lh /run/systemd/resolve/
netif/            resolv.conf       stub-resolv.conf  
 $ ls -lh /run/systemd/resolve/resolv.conf /run/systemd/resolve/stub-resolv.conf
-rw-r--r-- 1 systemd-resolve systemd-resolve 634 May 17 10:08 /run/systemd/resolve/resolv.conf
-rw-r--r-- 1 systemd-resolve systemd-resolve 717 May 17 10:08 /run/systemd/resolve/stub-resolv.conf

[ndro]

or anyone fighting this problem, as PA has not fixed it for months, this 3rd party client worked for me the very first try, even with our Azure SSO:
https://github.com/yuezk/GlobalProtect-openconnect

[senti4]

Hi ,

Even one my user facing same issue when i checked the VPN adapter is not getting connected .can you help me in this solution.

 which showing as undefined network.

[BigPalo]

Hi,

Im having the same issue. How did you resolve it? where can i take those scripts?

[ndro]

@BigPalo ,
GlobalProtect 6.1.3-703 is working for me on Ubuntu 22.04.04.
I have a symbolic link from /etc/resolv.conf to /run/systemd/resolve/stub-resolv.conf      
        sudo ln -s /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf

I was using https://github.com/yuezk/GlobalProtect-openconnect with success as well, but when it was upgraded to v2.x it started failing for me, and was also added paid functionality, so i removed it.

[BigPalo]

Hi,

I tried version 6.1.3 in my UBUNTU 24.04 and the result is the same. I can not reach any wel via browser when i connect to VPN. The VPN config is ok. 

ANy idea for agent i UBUNTU?

[ndro]

your resolv.conf is sym-linked as the other post recommend?