Hello Palo Alto teams ! I would like to raise a feature request here for Global Protect; Thanks to version 9.0, we're now able to have Global Protect DNS configuration assignment based on user group. Unfortunately, it's a "hard settings" and it cannot change according to which gateway we push those settings from Panorama. Yet, the Panorama already have the capability of using "Variables" which change the setting according to which gateway we push the configuration. Everything is already there to make it work, I'm sure it's not a big work. We would like as new feature, the possibility to use Panorama variables on the Global Protect DNS assignment based on user group. We have an ASPAC & EMEA GP gateway which share the same gateway settings, so our users can't get a local DNS according to which gateway they connect.
... View more