Pinging Global Protect Clients

MichaelMedwid — Fri, 03 Sep 2021 21:14:08 GMT

I am trying to troubleshoot a user who is claiming they are getting disconnected from GP VPN
due to issues seen at the application tier. I show them logged on since just before 7 and traffic logs
appear to show continuous TCP traffic in the last five hours since log on. But I was thinking I'd put

on a recursive ping to her laptop. But that traffic is dying at the PAN and I'm not seeing the ping that's

getting denied if I look at Monitor/Traffic. Traceroute shows allowed but it's not reaching the GP client

IP. Is there anything I can do to verify they are continuously connected?

UPDATE: I think the lack of ping-through may be on the side of the laptop. BUT I can see in GP

logs that a latency figure is measured on a regular interval. Is there a means to get more details

like the latency on a specific session?

Re: Pinging Global Protect Clients

fatboy1607 — Mon, 06 Sep 2021 12:23:51 GMT

Starts with basics

Have them run constant ping to google dns .

open new window run constant ping to gateway IP

open more window run ping to internet resource IP.

Validate when they report issue.

on global protect agent tab we see connection uptime for client what does that say.

if still issue debug logs can help us check.

topic Pinging Global Protect Clients in GlobalProtect Discussions

Pinging Global Protect Clients

Re: Pinging Global Protect Clients