PanGPA and PanGPS logs

syed222 — Thu, 20 Jan 2022 16:30:00 GMT

We now have more cases of users complaining of GP disconnect or slowness.

Need assistance reading the Global protect logs from the Agent.

Are there any know codes for Dump , Debug and Info that i should be looking out for when going through the log file.

Re: PanGPA and PanGPS logs

nikoolayy1 — Tue, 25 Jan 2022 20:55:24 GMT

You can take a look at:

LIVEcommunity - Knowledge sharing: Globalprotect troubleshooting/investgation. Split tunnel,Globalprotect app/agent configuration options and etc. to solve issues - LIVEcommunity - 415420 (paloaltonetworks.com)

Also for Globalprotect 5.2 and Palo Alto 9.1 you can see performance and latency from the Gateway Firewall:

GlobalProtect Gateway Latency Reporting (paloaltonetworks.com)

Also if you see many disconnect from the log you may a bottleneck in your network or if there is downgrade in the logs from ipsec to ssl it is bad as SSL is worse for performance.

How to detect when Global Protect client fails to establish IPS... - Knowledge Base - Palo Alto Networks

Troubleshooting GlobalProtect - Knowledge Base - Palo Alto Networks

In rare cases changing the MTU of the globalprotect can help:

Troubleshooting GlobalProtect MTU issues | Palo Alto Networks

Edit:

Also there is a nice subscription feature you may consider to use "GlobalProtect App Log Collection for Troubleshooting":

GlobalProtect App Log Collection for Troubleshooting (paloaltonetworks.com)

topic PanGPA and PanGPS logs in GlobalProtect Discussions

PanGPA and PanGPS logs

Re: PanGPA and PanGPS logs