04-04-2023 11:02 PM - edited 04-04-2023 11:03 PM
Hi,
When we connect GlobalProtect VPN from home network , it can connect . But we cannot connect GlobalProtect VPN from office Local LAN network. What settings do we need to configure to allow Office Local LAN user to allow GlobalProtect VPN connection?
04-04-2023 11:20 PM
Hi @EvanRaci , you mean you want to connect from GP, from your local network, behind the Palo Alto.
From your home internet, a cafe, an external site, etc. you can connect without problems, but not from inside your network ?
To do so do the following.
You must apply a NO-NAT
That is to say in the Top create a NAT, with origin your network or networks and/or internal zones, destination Public zone of the portal/gateway of GP and then is destination Address the IP of your Portal/Gateway and in this NAT, as in a NO-NAT in the part of translation, source and
destination, you leave it this way, as such in white, you apply and already to connect to GP from your LAN.
Greetings
04-04-2023 11:20 PM
Hi @EvanRaci , you mean you want to connect from GP, from your local network, behind the Palo Alto.
From your home internet, a cafe, an external site, etc. you can connect without problems, but not from inside your network ?
To do so do the following.
You must apply a NO-NAT
That is to say in the Top create a NAT, with origin your network or networks and/or internal zones, destination Public zone of the portal/gateway of GP and then is destination Address the IP of your Portal/Gateway and in this NAT, as in a NO-NAT in the part of translation, source and
destination, you leave it this way, as such in white, you apply and already to connect to GP from your LAN.
Greetings
04-04-2023 11:31 PM
@Metgatz Thank you and let me try
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
