GlobalProtect Client Shows "Connected You are on the internal corporate network" but There is no IP Address-to-Username Mapping of the User

• GlobalProtect App shows "Connected You are on the internal corporate network".
• There is no IP address-to-username mapping of the user in User-ID log sourced from GP.
• User traffic is not matching the intended user-based security policy.

• GlobalProtect (GP) App
• GP App Versions 6.0.8 or later / 6.1.3 or later / 6.2.3 or later
• Internal Host Detection
• Internal Gateway(s)

• When GP App shows "Connected You are on the internal corporate network", it means the internal host detection has been completed.
• The message does not mean client is authenticated to internal gateway.

Ensure the GP App is authenticated to internal gateway from Host Information Profile. Follow the procedure below for verification.

1. If the GP App is authenticated to internal gateway, Host Information Profile > More Details shows information about internal gateway such as last check-in time, gateway name and authentication status for each of internal gateway the client is successfully authenticated to.
   

2. If the GP App is not authenticated to internal gateway but Internal Host Detection is successful, Host Information Profile >  More Details does not show information about the internal gateway.
   

GlobalProtect for Internal HIP Checking and User-Based Access