Global Protect users are unable to access SQL database which hosted in Azure

[Vinod_Pathuri]

We have a tunnel configured between on-premises PA-5250 and Azure. traffic flows as expected users who are not connected to the global protect can connect to the SQLMS without any issues.

However, users who are connected to the GP can't access the SQLMS. traceroute reaches the GP gateway and ends.

if we try with the URL the traffic does not reach the gateway itself sometimes it works with the IP(private) only Telnet.

Any suggestions on this?

Note: Tried the NetBIOS disable option still facing and also tried changing split tunnel traffic to Network and DNS no luck as well.

everything work expect GP 🙂

GlobalProtect 

[JayGolf]

Hi @Vinod_Pathuri ,

Can GP users resolve the sql instance? Does resolution match the resolution of users not connected to GP? 

[Vinod_Pathuri]

Yes, both resolve to the Same internal IP.