topic Re: Not able to switch the gateway on windows. in GlobalProtect Discussions

Not able to switch the gateway on windows.

mshihora — Fri, 13 Nov 2020 19:13:34 GMT

The customer has three gateway configured.
1)SLC1 Centurylink
2) SLC1 Verizon
3) CORP VPN.
>When they switch gateway from CORPVPN>>SLC1 Verizon
or CORPVPN>>SLC1 Centurylink it gives an error.
>This only happens on the windows machine on MAC it's working fine.
>Please refer to the attached screenshot.

I also checked with GP 5.1.6 and 5.2.3. However, if we try to login to GP and switch the gateway from the PC which is not part of the user company domain we don't get this error. It only occurs on the windows system which are part of the domain. They are using the Okta for SAML authentication.

I don't found any issue on GP and the config also looks good need to confirm that the issue is not on the GP client.

Re: Not able to switch the gateway on windows.

BPry — Sun, 15 Nov 2020 04:44:48 GMT

@mshihora,

The fact that your getting that script error page indicates more of an issue with the SAML process than the actual configuration. If this is happening only on domain joined systems are you possibly doing any sort of decryption on these machines that you aren't for non-domain joined machines that could be getting in the way when you migrate gateways?

Likewise, if you temporarily exclude a domain joined machine from group policy assignment do you still run into the same issue?

Re: Not able to switch the gateway on windows.

mshihora — Sat, 21 Nov 2020 12:50:43 GMT

Thanks for the help. I am checking with customer waiting for reply.

Re: Not able to switch the gateway on windows.

mshihora — Tue, 24 Nov 2020 16:05:19 GMT

@BPry The customer has found that the issue is being introduced by Microsoft Intune. But we still haven't been able to identify what setting within Intune might be producing this script error.