This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About ManuShankar
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ManuShankar
11-29-2020
9Posts
0Likes
0Solutions
Nov 29, 2020Last Visited
User
Activity
User
Profile
Latest posts by ManuShankar
| Subject | Views | Posted |
|---|---|---|
| 28863 | 10-13-2020 06:34 AM | |
| 30615 | 10-13-2020 04:57 AM | |
| 30652 | 10-13-2020 03:25 AM | |
| 30781 | 10-13-2020 02:22 AM | |
| 1504 | 10-06-2020 10:07 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 04-20-2020 11:28 PM |
| Date Last Visited | 11-29-2020 05:02 AM |
| Posts | 9 |
10-13-2020
06:34 AM
Hi @Abdul-Fattah , As per my understanding if I create a DNS proxy then all DNS request from the VPN clients will come to Firewall IP, which I don't want. Firewall will act in the middle for all the request. I am with your point, re-establishing VPN connection, SFTP should also not work. unless clearing the windows DNS Cache. Actually this is told by user, honestly I couldn't check from user's machine. do you have any idea how to edit cache timeout? Thanks, Manu
... View more
10-13-2020
04:57 AM
Thank you @SutareMayur for the detailed explanation and the document. In this solution I have to create DNS proxy, new security policy, NAT etc. I was thinking a simple solution in another way. Just changing the primary DNS IP on the GP gateway to a public IP (which resolves sftp.xxx.com to public IP) the and secondary server as my internal DNS server IP. Please help me to understand if there is any major difference with the DNS proxy.
... View more
10-13-2020
03:25 AM
Hello @JoergSchuetter Thanks for your quick reply, appreciate it. I don't want to use the internal DNS, the SFTP traffic from GP VPN users should go via public IP. Let me explain; My DNS servers are 10.10.1.1 and 10.10.1.2 for both the internal (inside office) and for GP VPN. My SFTP internal IP is 10.16.10.10. The "sftp.xxx.com" resolves to 10.16.10.10 from internal network as well as GP VPN. I have configured a split tunneling and published the entire 10.16.0.0/16. Again I have configured an exclusion in the split tunnel for the IP - 10.16.10.10, to not use this IP for accessing the SFTP website from GP VPN. Instead it should use the public IP. Users are perfectly able to access the "sftp.xxx.com" from internal network. When they go home and access "sftp.xxx.com", it wont work unless they perform disable / enable the global protect.
... View more
10-13-2020
02:22 AM
I have an SFTP server. When users are inside the office they have to connect it via private IP. When they are at home they should go via public IP. I am using the same DNS server in Internal and Global Protect as well. I have excluded the private SFTP IP in Global protect split tunnel, so that users won't get connect with this IP, instead they have go over the public IP. Now the issues, when the users are at home they have to disable / enable the global protect, then only they will be able to connect to the SFTP server via public IP. Seems the DNS entry may be still there in the cache and it is trying to use the private IP. But they won't be able to access the server because we have excluded this private IP in the split tunnel. After performing a enable / disable, the cache may get clear and prefer to go via public IP. Is there any solution to avoid enabling / disabling the tunnel?
... View more
10-06-2020
10:07 PM
Is it possible to create QoS policy for restricting maximum bandwidth per global protect VPN user by 10Mbps of upload and download? Thanks, Manu
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-29-2020
05:02 AM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks