Users are randomly dropping IPSEC and establishing SSL connection

vnt90 — Thu, 09 Jul 2020 20:01:35 GMT

Users are randomly dropping their working IPSEC GP connection and switching to SSL. Is this somewhat normal operation of UDP across the internet? Is there any hidden timeout/handshake variables that can be set to allow the IPSEC not to drop so fast. Our connection setting are long

Re: Users are randomly dropping IPSEC and establishing SSL connection

Retired Member — Fri, 10 Jul 2020 07:20:03 GMT

Hi @vnt90,

If the connection is correctly working they should not drop it.

Is the "Automatically Use SSL When IPSec Is Unreliable (hours)" option enabled (value > 0)?

Have you looked into GlobalProtect Agent/Service logs gathered from the machine with those symptoms? Reason for the IPSec > SSL switch should be identifiable there.

To my knowledge timers for GlobalProtect tunnels, keepalives and timeouts, are hard-coded.

topic Re: Users are randomly dropping IPSEC and establishing SSL connection in GlobalProtect Discussions

Users are randomly dropping IPSEC and establishing SSL connection

Re: Users are randomly dropping IPSEC and establishing SSL connection