topic Unable to connect to global protect using wifi in GlobalProtect Discussions

Unable to connect to global protect using wifi

ashrafkhan — Thu, 17 Feb 2022 13:43:55 GMT

When I'm using Mobile data I'm able to connect to global protect but when I'm trying to connect through home wifi I'm unable to connect. Please help me.

Re: Unable to connect to global protect using wifi

sebastianvd — Fri, 18 Feb 2022 11:23:06 GMT

We had some trouble with WIFI but it wasn't the WIFI, it was the MTU causing the issue.

Re: Unable to connect to global protect using wifi

ashrafkhan — Sat, 19 Feb 2022 09:24:54 GMT

How did you solve then?

Re: Unable to connect to global protect using wifi

Robert — Wed, 28 Sep 2022 17:42:07 GMT

Well that was helpful.

Re: Unable to connect to global protect using wifi

sebastianvd — Fri, 02 Dec 2022 12:54:56 GMT

little late reponse, sorry 🙂 We have our palo FW's hosted in azure as VM's. Azure limits MTU to 1300. Azure also drops out-of-order segmented packets. As we used L3 roaming on our WIFI an extra piece of header was added. So we've limited the MTU in GlobalProtect. Also we used a powershell SSL connection for testing. It appeared that the same script had different results running on ISE, PS Cli or VS Code. The MTU header for IPSEC is variable so we took some margin to configure.