bSecure GlobalProtect VPN: Unable to access resource / service / site with GlobalProtect

In some instances the resource is not local to the UC Berkeley campus. It could be servers a cloud installation like Amazon or Google or provided as a service by companies like Oracle or PeopleSoft. Some of these are configured to only allow access from network addresses assigned to UC Berkeley. If the user is connecting to campus using the default gateway of Split Tunnel the VPN is not in use for service outside of the campus networks. Try using the Library and Full Tunnel gateway option and see if that corrects the problem.

In other cases services have been configured to only allow specific lists of network addresses to access the service. This can be done by a firewall, operating system control, or within the application itself. Often a configuration such as this has been in place for many years and newer administrators may not know it is in place. This is usually the case if the service works through Split Tunnel but not the Library and Full Tunnel. The bSecure remote access service using GlobalProtect uses new networks and will not match the restrictions in place. Users will need to open a ticket, or talk with, the people responsible for the service or server involved and ask them to review and update any restrictions. The address list for GlobalProtect is documented in knowledge base article KB0012492.