topic Global Protect SSL Fallback Time explanation in GlobalProtect Discussions

Global Protect SSL Fallback Time explanation

DrewNumberTwo — Mon, 03 Jul 2023 15:11:23 GMT

When looking in the GP>Portal>App settings there is an option for "Automatically Use SSL When IPSec Is Unavailable (hours)". 0 clearly disables the feature. But what exactly are we setting if we put in a number? Is it how long a user will run in SSL before reattempting IPsec? I have dug through the admin guide and cannot seem to locate an explanation for how that setting functions.

Re: Global Protect SSL Fallback Time explanation

aleksandar.astardzhiev — Tue, 04 Jul 2023 08:56:44 GMT

Hi @DrewNumberTwo ,

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-app-tab

Basically your expectation is correct - it defines for how long client will run on SSL without attempts to try IPsec again.