topic Re: Global Protect disconnects several times a day in GlobalProtect Discussions

Global Protect disconnects several times a day

GlenRaven-Rob — Fri, 08 Jan 2016 16:10:40 GMT

Our VPN users are complaining that after being connected for over 1 hour they get disconnected by global protect. They have to close global protect and reopen to connect back. We have remote customer service agents that get disconnected up to 4 to 5 times a day. We are running global protect version 2.3.3-5. We have opened a ticket with support and have escalated and had no success. Anybody else having this issue? Any luck getting resolved.

Re: Global Protect disconnects several times a day

googol — Fri, 08 Jan 2016 16:47:43 GMT

what type of firewall and version of PanOS would help as well

I am not experiencing, but I have not upgraded my users to 2.3.3 because I am (still) waiting for a better upgrade and delivery system.

Re: Global Protect disconnects several times a day

GlenRaven-Rob — Fri, 08 Jan 2016 17:03:06 GMT

3020s running 7.0.3

Re: Global Protect disconnects several times a day

googol — Fri, 08 Jan 2016 17:05:56 GMT

I would try upgrading to 7.0.4, much better "production" release.

Re: Global Protect disconnects several times a day

Retired Member — Sun, 10 Jan 2016 11:52:21 GMT

86803 Fixed an intermittent issue where the idle timer for GlobalProtect IPSec tunnels either did
not expire appropriately (such as when the tunnel was torn down) or expired at the
configured idle time expiration even when a user was actively using the connection. With
this fix, the GlobalProtect IPSec tunnel idle timer behaves as expected.

It is fixed in 7.0.4 and 6.1.8 (allthough it isn't mentioned in the 6.1.8 release document)

Can confirm it is working on 6.1.8 and 7.0.4, you should REALLY upgrade to the 7.0.4 release, it is night and day in comparison to the 7.0.1-7.0.3 releases.

-Sindre

Re: Global Protect disconnects several times a day

GlenRaven-Rob — Wed, 13 Jan 2016 19:33:04 GMT

We upgraded to 7.0.4 on 1-9-2016 and still having problems with global protect disconnects. Any other ideas?

Re: Global Protect disconnects several times a day

googol — Wed, 13 Jan 2016 19:34:07 GMT

sure there isnt an issue with the Internet or something down the line along their route to using VPN?

Re: Global Protect disconnects several times a day

GlenRaven-Rob — Wed, 13 Jan 2016 20:34:22 GMT

This is affecting several customer service agents that work from their home in different parts of the US. It has been escalated to Palo Alto engineering now. Still no resolution.

Re: Global Protect disconnects several times a day

GlenRaven-Rick — Wed, 13 Jan 2016 20:35:50 GMT

From the logs on the client I see that the service sees a packet that seems to corrupted and this causes the service to close the connection.

(T15964) 12/22/15 10:17:52:802 Error( 306): read(zero byte) failed: 0 >>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 184): Error processing receive data from client>>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 190): close client socket
(T15992) 12/22/15 10:17:52:894 Debug( 142): CheckPanGpAgentThread: PanGPA process 15984 exits, ret is 00e88eb0.
(T15992) 12/22/15 10:17:52:894 Debug( 150): GlobalProtect agent terminates unexpectedly. Skip StopThreads().>>>>> !!!

Everytime we close out the connection, it is because of this packet that we see. On the firewall I see that the client disconnects with the firewall.

As of now Support nor Engineering has an answer.

Re: Global Protect disconnects several times a day

yaboyhamm — Mon, 27 Sep 2021 15:11:42 GMT

I'm having this issue currently. Has anyone found the fix?