topic Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues in GlobalProtect Discussions

GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Fri, 26 Mar 2021 08:36:27 GMT

A lot of issues have been fixed in this release, at least for our issues.

Haven't tested it yet but much fixes are touching our issues with standby/windows10 and split domain.

Addressed Issues in GlobalProtect App 5.2 (paloaltonetworks.com)

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

gmcwilliams — Fri, 26 Mar 2021 16:58:00 GMT

After updating, I am not seeing any GlobalProtect logs for people on 5.2.5-c84, are any of you guys seeing the same issue?

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

tigeli — Fri, 26 Mar 2021 20:45:50 GMT

Lots of stuff got fixed but they also broke IPsec connectivity over IPv4 (NAT) and IPv6 on macOS, 5.2.5-84 falls back to SSL with those (rolling back to 5.2.5-66 works ok). IPv4 without NAT works with IPsec with -84.. I guess there's no QA team. 😄

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Mon, 29 Mar 2021 11:13:06 GMT

I do see log entries for the people i've upgraded

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Mon, 29 Mar 2021 11:14:06 GMT

So how do you mean NAT ?

We use IPv4 and clients are natted and firewalls are on private ip's behind azure public ip's so that's NAT.

No issues so far

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

tigeli — Mon, 29 Mar 2021 11:26:47 GMT

@sebastianvd Well.. clients behind NAT will fallback to SSL and with -66 release IPsec still works without fallback.

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Mon, 29 Mar 2021 11:41:44 GMT

@tigeli Well our test users are working from home, so behind NAT of their own routers and firewalls.

They all seem to be working fine with IPSEC according to the logs.

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Wed, 31 Mar 2021 07:46:53 GMT

At first it looked promising but we still have the gpfltdrv issue when streaming youtube.

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

Sahir_Algharibih — Wed, 31 Mar 2021 15:45:17 GMT

They fix one thing and break 10 other things. Lack of testing and validation for sure. It's extremely frustrating.

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

jdelio — Wed, 31 Mar 2021 20:43:16 GMT

I was able to research this a little.. and found this info..

You cannot directly run 5.2.5-c84 on top of another 5.2.5 because they are the same product id and on the same release.

The only way you can upgrade to 5.2.5-c84 from another 5.2.5-x is to uninstall the old 5.2.5 first, and then install 5.2.5-c84. But if is using portal upgrade, it will be OK.

Further more, if the machine installed 5.2.4 or older release, and run 5.2.5-c84 on top of it, it should be OK. but again, there is always some risk by directly clicking on a msi if you have GP running already, also need be sure the user has the administrative privilege.

Directly click on msi should be only recommended for the initial installation when there is no other GP in the system.

I hope this helps a little

Re: GlobalProtect App 5.2.5-c84 Hotfix Addressed Issues

sebastianvd — Fri, 09 Apr 2021 11:33:15 GMT

5.2.6 available