Global Protect unable access certain vm behind firewall

Reply
Highlighted
L1 Bithead

Global Protect unable access certain vm behind firewall

Hello Folks.

 

So we have configured GP in one VM-Series in a Cloud Community. We are experiencing unusual behavior. I do not know whether it was the GP configuration or it is in the VM. So sample VM 1 has an IP of 192.168.14.X  and VM 2 has an IP of 192.168.14.X when connected in GP I can ping VM1 also the traceroute is complete but when trying to reach VM 2 is shows RTO and it is not reachable via traceroute. When looking into the firewall logs it show that the the traceroute is allowed going to VM 2 with an application of traceroute, also it hits the right rule. 

 

Thank you for your answers if you replied.!

CYmeh

Accepted Solutions
Highlighted
L1 Bithead

Re: Global Protect unable access certain vm behind firewall

Found the problem here. Never assign any network for GP that has the same segment as an interface of a vm that is behind the firewall.

CYmeh

View solution in original post


All Replies
Highlighted
Cyber Elite

Re: Global Protect unable access certain vm behind firewall

@vtlikinio,

Does the other VM have a route back to whatever IP space you are using for GlobalProtect clients? If you take a packet capture on the unreachable VM does it show traffic hitting the VM from GlobalProtect clients? 

Highlighted
L1 Bithead

Re: Global Protect unable access certain vm behind firewall

@BPry 

 

Yep, just took PCAP just now the GP reaches the ping but the server does not response back.

CYmeh
Highlighted
L1 Bithead

Re: Global Protect unable access certain vm behind firewall

Found the problem here. Never assign any network for GP that has the same segment as an interface of a vm that is behind the firewall.

CYmeh

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!