Clientless/GP portal does not load in browser on 10.2.9-h1

UtkarshKumar — Fri, 23 Aug 2024 17:16:47 GMT

We are facing an issue where the Clientless/GP Portal does not show the login page on the browser.

When traffic reaches the external firewall, we see the connection being allowed. We are using the Go Daddy cert and have ensured the cert chain is complete on the firewall.

The strange part is it works if we use GP Client we can connect to GP Portal just fine but it's clientless and web portal that is not loading and the browser gives us the error:

ERR_EMPTY_RESPONSE

This page isn’t working right now.

"Portal address" didn’t send any data.

Curl Shows: Curl Error 56 "Failure when receiving data from the peer"

The PANOS version is 10.2.9-h1, we can see all public IPs coming to the portal and the connection is ending with reason TCP-FIN.

We have already tried restarting the web-related process, and "sslmgr" process does not seem to help.

What can we do or if we need to restart the process related to GP/Clientless VPN in Palo.

Would appreciate any suggestions.

Re: Clientless/GP portal does not load in browser on 10.2.9-h1

arusharma — Thu, 24 Oct 2024 14:56:27 GMT

Collect HAR files using a developer tool and analyze it for any errors. Also take pcap on client to find out SSL handshake failures.

Re: Clientless/GP portal does not load in browser on 10.2.9-h1

BPry — Sun, 27 Oct 2024 03:01:20 GMT

@UtkarshKumar,

Sounds like your running into PAN-259760 which is a known issue in PAN-OS 10.2, so restarts and such aren't really going to help. Install 10.2.9-h14 and the issue should be resolved.

topic Re: Clientless/GP portal does not load in browser on 10.2.9-h1 in GlobalProtect Discussions

Clientless/GP portal does not load in browser on 10.2.9-h1

Re: Clientless/GP portal does not load in browser on 10.2.9-h1

Re: Clientless/GP portal does not load in browser on 10.2.9-h1