topic Re: GlobalProtect stops responding in GlobalProtect Discussions

GlobalProtect stops responding

nikoo — Fri, 17 Jun 2022 20:50:24 GMT

After upgrading from 9.1.13-h to 9.1.14 issue was noticed (not sure if it was present earlier) - in about a week/two GlobalProtect stops responding - even portal page is not opening from the browser, so also GP client connection fails. It is not getting to authentication or anything further. Portal IP is responding in general - pings are fine and even initial TCP 3-way handshake is seen in the captures.

HA failover to secondary helps. Rebooting failed device helps. Rebooting only dataplane also helps.

Took some information and will research that, not going too deep here, but, by any chance, has anyone seen something like this?

Re: GlobalProtect stops responding

BPry — Sat, 18 Jun 2022 05:12:42 GMT

@nikoo,

I'd open a support ticket with TAC just to verify if anyone else is reporting this behavior. I've ran into this at various times due to previous software issues exactly as you've described with failover and restarts working, and it usually happens that simply restarting the sslvpn process is enough to get things fully functional without a failover of any sort.

Seems like we've had a few different reports of issues with 9.1.14 though, so I wouldn't be surprised to hear that there's a process issue in that release at the moment.

Re: GlobalProtect stops responding

nikoo — Sat, 18 Jun 2022 06:47:23 GMT

@BPry.,

Thank you for the input - TAC case will be the way to go, that's for sure.

Tried sslmgr, rasmgr, webssl process restarts and debugs to try and narrow down the issue, but did not help - dataplane restart was the last straw.