10-26-2017 09:05 AM
We have had our Palo 3020 along with GlobalProtect for about a year now, and we continue to struggle with all sorts of GP issues. I'm curious to know how are you all using GlobalProtect?
One Issue - Our strategy was to use GlobalProtect as an Always-On connection, as we've invested in Palo's URL filtering and solely use that for URL inspection. Because of this, we do not use split tunneling and send all traffic, including inordinate amounts of DNS requests through the Palo. This has proved to be cumbersome at best, and ensuring GP is always connected using SSO and Windows 10 machines is a challenge which translates in to security concerns because user's may not always be connected for a variety of reasons.
Are any of you using GlobalProtect and URL filtering in this way?
