GlobalProtect with Beryl AX / Wireguard / StarVPN

[beryl]

Hello all,

I have been recently required by my company (who I do not want to know that I am outside US) to use a new web app that requires their corporate VPN installed on my work laptop to access. It is GlobalProtect (from PaloAltoNetworks) and I have a BerylAX setup with Wireguard config using StarVPN Static Residential IP to make it look like I am in NYC.

I kind of just assumed that I would be able to use this ‘nested’ VPN setup because of my hardware setup, but I am wrong. I can successfully connect to GlobalProtect, and my connection says it is stable, but I cannot load any webpage. I enter a website and it just loads forever, never times out. Has anyone else run into this problem?

[admon]

Hey

please follow this thread to provide all the necessary data for troubleshooting.

Allow me to offer a personal opinion: your employer has ways and means to find out whether you are in the States or not. In the long run, it only helps if you are open & honest with him.

If you have company devices, it would be clear which country you are in, any way - regardless of which VPN is active. The protection is a bit better for private devices, but you could still find out if you wanted to.

[bring.fringe18]

@admon

Allow me to offer a personal opinion: your employer has ways and means to find out whether you are in the States or not. In the long run, it only helps if you are open & honest with him.

Don’t listen to this guy 🢁. His professionalism has no place here.

@beryl

I kind of just assumed that I would be able to use this ‘nested’ VPN setup […]

Just an FYI: another networking term is ‘tunnel-in-tunnel’ but the concept is the same. The VPN client software on the computer theoretically shouldn’t matter as the Beryl AX is independent of the computer. It should be transparent to your computer provided your employer isn’t doing some sort of multiple data point analytics/collation/filtering… but you’d have to know more about their network operations to know.

Search around the forum. I’ve written more than one post on 'clandestine remote working`:

Setup Leak safe

So the device, the notebook/laptop, in this case, is Employer equipment & ‘locked down’? That compounds things. There’s no telling what they’ve got loaded on there that could be for tracking/reporting. I’d only use that computer for work; keeping my personal life wholly separate on a different one. Make sure location services, Bluetooth is killed/never used. I’d set the clock to UTC of your home timezone & make sure it doesn’t connect to the 'net to get current time updates (eg: time.windows.co…

Router connects to home ip address while abroad on personal laptop but not company laptop

Hey guys. Love the active forum here. I have a ATX1800 at home and another one at my remote location. Everything is working fine on my personal laptop, and it’s showing my home ip address. But on my company laptop, the router connects to internet but still shows actual location. Tried on a 3rd, my MacBook, and that shows home ip address as well. The company laptop has a VPN Global Protecr that starts automatically at startup when connected to internet and I cannot disable or uninstall it. I can…

Advice for my Current Setup and Fallback Routers

At this point, I have four routers. Two Beryl AX, an unopened Opal 1200 and an unopened Slate AX. I was able to get the two Beryl AX routers up and working - one server, one client using Wiregaurd VPN to mask my location. Some questions and concerns: I tested the Client Beryl at a friend’s house and it wouldn’t connect to her Wi-Fi normally, only worked via Ethernet cable. That makes me nervous for obvious reasons. I did drop this Beryl from a height of about 5 feet though… could that have fr…

No promises, though. Death & taxes … & all that.