Cannot connect GlobalProtect VPN from Local LAN network

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Cannot connect GlobalProtect VPN from Local LAN network

L1 Bithead

Hi,

 

When we connect GlobalProtect VPN from home network , it can connect . But we cannot connect GlobalProtect VPN from office Local LAN network. What settings do we need to configure to allow Office Local LAN user to allow GlobalProtect VPN connection?

 

1 accepted solution

Accepted Solutions

L4 Transporter

Hi @EvanRaci , you mean you want to connect from GP, from your local network, behind the Palo Alto.

 

From your home internet, a cafe, an external site, etc. you can connect without problems, but not from inside your network ?

 

To do so do the following.

 

You must apply a NO-NAT

 

That is to say in the Top create a NAT, with origin your network or networks and/or internal zones, destination Public zone of the portal/gateway of GP and then is destination Address the IP of your Portal/Gateway and in this NAT, as in a NO-NAT in the part of translation, source and

destination, you leave it this way, as such in white, you apply and already to connect to GP from your LAN.

 

Greetings

High Sticker

View solution in original post

3 REPLIES 3

L4 Transporter

Hi @EvanRaci , you mean you want to connect from GP, from your local network, behind the Palo Alto.

 

From your home internet, a cafe, an external site, etc. you can connect without problems, but not from inside your network ?

 

To do so do the following.

 

You must apply a NO-NAT

 

That is to say in the Top create a NAT, with origin your network or networks and/or internal zones, destination Public zone of the portal/gateway of GP and then is destination Address the IP of your Portal/Gateway and in this NAT, as in a NO-NAT in the part of translation, source and

destination, you leave it this way, as such in white, you apply and already to connect to GP from your LAN.

 

Greetings

High Sticker

@Metgatz  Thank you and let me try

Hello @EvanRaci 

Do you testing yet ? it's work right ? 

 

  • 1 accepted solution
  • 2006 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!