![](\"https:\/\/www.sonicwall.com\/wp-content\/plugins\/right-answers\/img\/calendar.png\")
\u00a003\/26\/2020\u00a0<\/p>\n\n\n\n\u00a003\/26\/2020\u00a0<\/p>\n\n\n\n
original post: https:\/\/www.sonicwall.com\/support\/knowledge-base\/no-internet-access-when-connected-to-global-vpn-client-gvc\/170505862769521\/#:~:text=CAUSE%3A,Internet%20Connection%20for%20web%20traffic.<\/a><\/p>\n\n\n\n DESCRIPTION:<\/p>\n\n\n\n This article explains troubleshooting scenarios where users connected to Global VPN Client can access the VPN networks, but not the Internet.<\/p>\n\n\n\n CAUSE:<\/p>\n\n\n\n This issue could be caused if either of the modes of using GVC; Split Tunnel<\/strong> and Tunnel All (Route All VPN)<\/strong> are not configured correctly.<\/p>\n\n\n\n Split Tunnel:<\/strong> This is the most common deployment. This allows the users to access the VPN resources while using their own local Internet Connection for web traffic.<\/p>\n\n\n\n Tunnel All:<\/strong> In this mode, all web traffic from the user computer is sent across the VPN connection and sent out through the firewall’s Internet connection.<\/p>\n\n\n\n There are certain settings required for using either of these modes. If we configure a Tunnel all Mode without giving access to the required networks, the Internet traffic from the client computer will be blocked. Similarly, if split tunnels are not configured as expected, the the firewall might receive traffic that it is not expecting, and drop it.<\/p>\n\n\n\n RESOLUTION:<\/p>\n\n\n\n \u00a003\/26\/2020\u00a0 original post: https:\/\/www.sonicwall.com\/support\/knowledge-base\/no-internet-access-when-connected-to-global-vpn-client-gvc\/170505862769521\/#:~:text=CAUSE%3A,Internet%20Connection%20for%20web%20traffic. DESCRIPTION: This article explains troubleshooting scenarios where users connected to Global VPN Client can access the VPN networks, but not the Internet. CAUSE: This issue could be caused if either of the modes of using GVC; Split Tunnel and Tunnel All (Route All VPN) are not configured correctly. Split Tunnel: This is the most common deployment. Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[13,9],"tags":[],"class_list":["post-609","post","type-post","status-publish","format-standard","hentry","category-firewalls","category-networks"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=609"}],"version-history":[{"count":0,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/609\/revisions"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Image\"](\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170816177039.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjI4NTE0MzcsImlhdCI6MTU5MTMxNTQzN30.uBM_0DQqaiuyUgG31gnMWyO9KwCywVvtn0c37QSOA4o\")
<\/li>![\"Image\"](\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170816202718.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjI4NTE0MzcsImlhdCI6MTU5MTMxNTQzN30.uBM_0DQqaiuyUgG31gnMWyO9KwCywVvtn0c37QSOA4o\")
<\/li>
NOTE:<\/strong> If Tunnel all is configured and the default route checkbox is not checked, the traffic will make it to the firewall from the host computer, but the firewall will drop it.<\/li>![\"\"](\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/images\/content_tip.gif\")
TIP:<\/strong>NAT policies also affect how the firewall sends the traffic out in case of a Tunnel All Mode. If the firewall does not have a NAT policy configured for all traffic coming in from the GVC client, it will drop traffic with Packet dropped: Enforced Firewall Rule<\/strong>.<\/p>\n\n\n\n![\"Image\"\/](\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/portlets\/results\/onsitehypermedia\/090170816749661.png?linkToken=eyJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzb25pY3dhbGwiLCJleHAiOjE2MjI4NTE0MzcsImlhdCI6MTU5MTMxNTQzN30.uBM_0DQqaiuyUgG31gnMWyO9KwCywVvtn0c37QSOA4o\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/sonicwall.rightanswers.com\/portal\/app\/images\/content_note.gif\")
NOTE:<\/strong> The NAT policy instructs the firewall to translate any traffic going to any destination to be NAT’ed to the WNA IP of the firewall ( In this case, X1 IP). The traffic is controlled by specifying the Inbound and Outbound Interface.<\/p>\n","protected":false},"excerpt":{"rendered":"