Inactivity logout on missing HIP check after Windows update

Adrian_Jensen — Thu, 03 Nov 2022 18:40:04 GMT

We have been having an issue with a handful of random always-on GP clients (out of ~250) getting automatically logged out of the Gateway every 3 hours after monthly Windows update cycles. Looking at logging, the client stops hourly HIP check reporting and hits the Inactivity Logout timer (3 hour). On reconnect a single HIP check is sent and then nothing for 3 hours until the client is disconnected on inactivity again. A reboot of the PC fixes the issue, then a different handful of PCs will do the same thing after next month's Windows updates.

The closest issue I can find is PAN-151458 detailed in this thread , but that is suppose to only affect on-demand clients and be fixed in 9.1.7. Has anyone else run into this?

topic Inactivity logout on missing HIP check after Windows update in GlobalProtect Discussions

Inactivity logout on missing HIP check after Windows update