Palo Alto (GlobalProtect) URL duplicated

[rzavala12]

Hi, everyone!

I’ve noticed that when I add a new application and try to access it using the clientless page, the URL is sometimes rewritten with a duplicate path. For example, it becomes:

https://vpnconnect.mycompany.org/https/app1.menu.com/app/https/app1.menu.com/app 

instead of the correct URL:

https://vpnconnect.mycompany.org/https/app1.menu.com/app/ 

I’m wondering if there’s a way to fix this issue or create an exception for certain applications. This only happens with a few apps, not all. I’m currently using a PA-455 device running PAN OS 11.1.

Thanks!

[JayGolf]

Hi @rzavala12 ,

It looks like the apps being rewritten rely on absolute paths, which means that when they are accessed via GlobalProtect, the app appends its own path again, causing the duplicate URL issue. 
Can you try going onto your Portal -> Clientless VPN -> Advance Settings -> Test by entering the domain into the Rewrite Exlude Domain List?