About TBardIPsoft

I have already contact Palo Alot Networks support about this issue and their comment back to me was "you need to protect the route preference/configuration from the host side."   The issue that I am facing is that we have third parties that are not managed by our company however need access to medical systems to support our customers.  In order to allow these individuals access they use our VPN to connect to the customer site. The current VPN solution that we have does this without any issues.   While testing full tunnel with GP-VPN we discovered that you are able to change your default route via the cmd command  < route change >.  This allows you to stay connected to the GP-VPN for network access (Even with "Enforce GlobalProtect Connection for Network Access" = Yes) while having access to your local Internet connection effectivly changing the full tunnel to a split tunnel.  Since there are no other monitoring settings for the GP-VPN that can detect and prevent this change the only way to stop this action is via managing the client itself.  However this brings us back to the point that the support of of some of these devices is being done by third parties of which we do not manage.   Does anyone have any suggestions or solutions? Maybe there is some magic check box that I am missing somewhere in GP that will prevent this action from working on the host? Anything would be helpfull at this point, but I have a feeling I will just have to tell them that we need to be able to manage all endpoints that are using this VPN connection for support.  Which in my openion should be the case already. ... View more