GlobalProtect - Enforce GlobalProtect Connexion for Network Acces

[CHARRIER]

Hi,

I have configure some globalprotect portal with option Enforce GlobalProtect Connexion for Network Acces enable.

For our external portal, this option works great.

But for our internal portal, this option seems to not working like i expect.

If i am on internal network, and cannot connect to internal portal, the network is disabled.

But, if i am on a external network, and the portal is unreachable, the GP client disabled itself, and the access to the network is not disabled.

If the globalprotect cannot joined the portal address, he doesn't block the traffic  when the option Enforce GlobalProtect Connexion for Network Acces is enabled ?

[CHARRIER · Accepted solution]

Problem fixed when i changed the parameter "Connect Method" to "User-logon ( Always on)" instaed of "Pre-logon (Always On)" on the app tab in portal agent configuration.