11-19-2019 12:24 AM
@BruceBennett, Hi.
some additional info....
the PanGPS log on the client device will assist with DNS resolution issues.
search the PanGPS log for your internal host detection IP address. (we use 10.250.1.56)
IP 10.250.1.56
host prxweb.xxx.xxx.uk
DnsQuery returns 0
The host name is prxweb.xxx.xxx.uk
is a succesful internal detection.
the following is unsuccesful
IP 10.250.1.56
host prxweb.xxx.xxx.uk
DnsQuery returns 1460 or 930 (anything here but a zero)
IP 10.250.1.56
pan_get_ip_by_host() getaddrinfo failed with error code (11001)!
internal detection works for us and you do not need an internal gateway, not sure if this changes for pre-logon as don't use it.
FYI. be aware that if you are testing by switching from wifi to LAN then internal detection will not work and you will need to refresh the GP client manually for this to happen. it used to happen but they changed it in a more recent version. this causes us issues for our users going from meeting rooms (WiFi) to desk (LAN) as GP now tests to see if the gateway is still available before refreshing. The timeout for this can be adjusted in the app but this then causes issues for roaming. our workaround is to have portal and gateways on different addresses and only allow access to the portal from the LAN. fortunately we have spare addresses to be able to do this.
HTH.
