Dear all, Just for information if someone has the same problem, because we had solved our problem. GlobalProtect client doesn´t set the Connection-specific DNS Suffix, it set the DNS suffix search list only for the network device. One option is to set the Connection-specific DNS by yourself in the network device or to add your ConfigMgr servers in hosts file (including DNS suffix) - Yes, both options are workarounds only, but they will work. I hope this helps someone with the same problem.
... View more
Dear all, I'm sorry I hijacked this thread, but it looks a lot like our problem. We are currently switching our VPN client from Cisco AnyConnect to PAN GlobalProtect (onDemand) and have a similar problem with ConfigMgr Agent 1910 and PAN GlobalProtect 5.0.9-15. SCCM in general is working e.g.(un)installing selfservice packages, but new advertisements will not become visible in SoftwareCenter and will also not installed. Also SCCM advertisemnts we updated or changed will not be updated on the machine which is connected with GlobalProtect. In the meantime we found out that when we restart the "SMS Agent Host" (ComExec) after connected with GlobalProtect everthing works like it should. That means SCCM boundaries are set correctly, all ports are open which are needed to communicate with the ConfigMgr server. I had running Wireshark for hours but see only "Duplicate to the ACK in frame" which shouldn´t be a problem. Has somebody an hint or maybe solved this already? Thank you in advance!
... View more