GP 5.2.6 - Post-VPN-Connect error

rajjair — Fri, 21 May 2021 23:21:43 GMT

Just wondering if anyone is seeing this issue by chance on windows with post-vpn-connect on GP 5.2.6 I am pretty sure it worked fine with older versions... but we have had other bugs with the older client so can't really roll back

Scenario 1 - If a machine is rebooted the behaviour we see is the post connect command is called however it errors out "Failed to open process 0. Error 87"

(P6440-T10060)Debug(3390): 05/21/21 16:45:58:179 Full path is "C:\LocalData\_temp\test.bat"
(P6440-T10060)Debug(3395): 05/21/21 16:45:58:179 Full command is "C:\LocalData\_temp\test.bat"
(P6440-T10060)Debug( 181): 05/21/21 16:45:58:181 Run cmd "C:\LocalData\_temp\test.bat" in session -1 as user
(P6440-T10060)Debug( 265): 05/21/21 16:45:58:194 didn't find the specific process.
(P6440-T10060)Error(3420): 05/21/21 16:45:58:195 Failed to open process 0. Error 87
(P6440-T10060)Error(3472): 05/21/21 16:45:58:195 Failed to launch command. Error 87. Command "C:\LocalData\_temp\test.bat" as user, timeout 0.
(P6440-T10060)Debug(3475): 05/21/21 16:45:58:195 Result is false for run command "C:\LocalData\_temp\test.bat". as user, timeout 0

Scenario 2 - Log out and log back in the post connect command is not called at all do not see any event in the log file for it

Scenario 3 - Refresh the VPN client connection the command is called and it runs fine with no issues

(P6400-T2680)Debug(3525): 05/21/21 16:39:39:897 Expanded "C:\LocalData\_temp\test.bat" to "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug( 190): 05/21/21 16:39:39:897 Vpn event post-vpn-connect has empty checksum
(P6400-T2680)Debug( 193): 05/21/21 16:39:39:897 Vpn event post-vpn-connect is valid
(P6400-T2680)Debug(3368): 05/21/21 16:39:39:897 Command file is "C:\LocalData\_temp\test.bat". Parameters
(P6400-T2680)Debug(3390): 05/21/21 16:39:40:034 Full path is "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug(3395): 05/21/21 16:39:40:034 Full command is "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug( 181): 05/21/21 16:39:40:037 Run cmd "C:\LocalData\_temp\test.bat" in session 2 as user
(P6400-T2680)Error( 277): 05/21/21 16:39:40:057 WTSQueryUserToken failed. Error: 5
(P6400-T2680)Error( 318): 05/21/21 16:39:40:066 RunProcessIntoDifferentSession: failed to SetTokenInformation. Error: 1314
(P6400-T2680)Debug(3432): 05/21/21 16:39:40:158 Successfully launched "C:\LocalData\_temp\test.bat" as user, timeout 0. Pid 3132

Re: GP 5.2.6 - Post-VPN-Connect error

rajjair — Fri, 04 Jun 2021 03:29:54 GMT

Talking to palo support they say this expected behaviour post-vpn-connect is not support in pre-logon states

topic GP 5.2.6 - Post-VPN-Connect error in GlobalProtect Discussions

GP 5.2.6 - Post-VPN-Connect error

Re: GP 5.2.6 - Post-VPN-Connect error