I’m encountering a problem on my work laptop where, upon connecting to my home Wi-Fi with the Global Protect VPN enabled, the internet browser fails to function. Once I disable the VPN, the browser works seamlessly with the home Wi-Fi. Also, when I switch to my mobile data hotspot, the internet browser functions normally even with the VPN active. Could you provide some guidance or insights into this issue?
Sounds like overlapping IP segments.
Sound like NAT issue. Maybe need a hairpin NAT? Depending which way you want Internet traffic to route. Either over VPN or not. Just a guess though
Let me see PANGP logs and PANGA logs something like that. Just take dump files from global protect application.
Try turning off IPv6 on the wireless adapter and the globalprotect adapter.
I’ve seen this fix that and haven’t figured out how to eliminate the need to do that yet. (If anyone knows why, please comment!)
Multiple reasons could be there. I would follow below steps, give it a try.
First connection status is stable and you got a tunnel ip address and note it down.
if its windows do a route print and see whether its a full tunnel or split tunnel.
if you see 0.0.0.0 destination with next hop as your gp adapter ip then its a full tunnel
then you need to check the security policy and nat policy on the firewall for GP zone
check your dns is resolving.
If its a split tunnel do wireshark and see on which adapter traffic goes.
enable debug and see PanGPA and PanGPS logs.
I would absolutely suggest you engage support who manage the firewall. Export the gpvpn agent logs for them too - I get well annoyed when I get escalation without those logs.
If dns is working- check proxy settings. Try browsing to internal things. Check mtu across tunnel from client machine. Check routes on client machine.
Edit: if it’s just the home circuit - they may block IPSec by default, so check with your isp. If, as suggested it connects, check if it is ssl or IPSec. Circle back on mtu.