GP 6.2.1 stopped to work on Linux

LPinchon — Fri, 07 Feb 2025 12:56:39 GMT

Hello,
This morning we detected that Global protect version 6.2.1 stopped to work on several Linux Distributions.Released on the 09/26/2024.

This version is widely used by our organisation and worked perfectly.

Issue:

Global Protect start normally
Portal information is correct within Global Protect
Connect button available and working
PopUp requesting for authentication appears
Once validating username, GP windows disapears
Password is never requested., GP is running.

No GP configuration changes were made on FW / Clients.
Could it be due to FW automatic updates?

Installing the Version 6.2.0- released on the 05/13/2024 solved the issue. No configuration change were done.
Is it a known issue?

Linux updates might be the source causes, but it all happen on different distributions, Ubuntu, Centos, RH..

Anyone experienced the same issue?

THx

Re: GP 6.2.1 stopped to work on Linux

LPinchon — Fri, 07 Feb 2025 11:20:38 GMT

PanGUI.log with GP 6.2.1

RECV_FROM_GPA: <request><type>start-gui</type></request>
P4059-T1993991744 02/07/2025 12:08:08:294 Info ( 689): debug thread starts
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug( 82): PanGPA connection successful
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4530): SetupDBusEnv: UID = 10015319
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4531): SetupDBusEnv: XDG_RUNTIME_DIR = /run/user/10015319
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4532): SetupDBusEnv: DBUS_SESSION_BUS_ADDRESS = unix:path=/run/user/10015319/bus
P4059-T-1953818304 02/07/2025 12:08:09:495 Debug( 254):
SEND_TO_GPA: <request><type>get_config</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:09:495 Debug(3248): GP Initial Handshake State: 1/4: Send GET_CONFIG to GPA
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 193):
RECV_FROM_GPA: <response><type>get_config</type><use-ssl-tunnel>no</use-ssl-tunnel><can-change-portal>yes</can-change-portal><default-browser>no</default-browser><on-demand>yes</on-demand><enable-signout>yes</enable-signout><pan-fips-initialization-status>0</pan-fips-initialization-status><disable-allowed>yes</disable-allowed><last-url>vpn1.CONTOSO.com</last-url><rediscover-network>yes</rediscover-network><fed-mandate>no</fed-mandate><cdl-log>no</cdl-log></response>
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 188): PanGPUIStatusMgr::updateConfig can_change_portal 1
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 195): PanGPUIStatusMgr::updateConfig default_browser 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 208): PanGPUIStatusMgr::updateConfig: disable-allowed true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 215): PanGPUIStatusMgr::updateConfig: last-url vpn1.CONTOSO.com
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 222): PanGPUIStatusMgr::updateConfig: enable_signout received true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 230): PanGPUIStatusMgr::updateConfig: rediscover_network received true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 237): PanGPUIStatusMgr::updateConfig fed_mandate 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 244): PanGPUIStatusMgr::updateConfig cdl_log 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug(4733): GP Initial Handshake State: 2/4: Received GET_CONFIG from GPA
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 254):
SEND_TO_GPA: <request><type>retrieve-last-state</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug(2708): GP Initial Handshake State: 3/4: Send retrieve-last-state to GPA
P4059-T-1953818304 02/07/2025 12:08:10:010 Debug( 193):
RECV_FROM_GPA: <?xml version="1.0" encoding="UTF-8"?>
<response>
<type>saml-pre-login</type>
<status>Disconnected</status>
<protocol/>
<portal-config-version>4100</portal-config-version>
<error-must-show/>
<error-must-show-level>error</error-must-show-level>
<error/>
<product-version>6.2.1-276</product-version>
<product-code/>
<portal-status>Invalid portal</portal-status>
<user-name>USercontoso</user-name>
<username-type>saml</username-type>
<state>Retrieving configuration...</state>
<check-version>no</check-version>
<portal>vpn1.Contoso.com</portal>
<discover-ready>no</discover-ready>
<mdm-is-enabled>no</mdm-is-enabled>
<saml-auth-status>0</saml-auth-status>
<saml-auth-method>REDIRECT</saml-auth-method>
<saml-request>long.............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</saml-request>
<prelogin-cookie/>
<saml-prelogin-portal>yes</saml-prelogin-portal>
<saml-chrome-sso-support/>
<cas-auth/>
<saml-default-browser>yes</saml-default-browser>
<saml-request-id>0</saml-request-id>
</response>

P4059-T-1953818304 02/07/2025 12:08:10:012 Debug(1425): GP Initial Handshake State: 4/4: Complete
P4059-T-1953818304 02/07/2025 12:08:10:271 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unrecognized Content-Security-Policy directive 'frame-ancestors'.

P4059-T-1953818304 02/07/2025 12:08:10:740 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unrecognized Content-Security-Policy directive 'frame-ancestors'.

P4059-T-1953818304 02/07/2025 12:08:12:009 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unhandled promise rejection
P4059-T-1953818304 02/07/2025 12:08:22:418 Debug( 193):
RECV_FROM_GPA: <request><type>start-gui</type></request>
P4059-T-1953818304 02/07/2025 12:08:23:527 Debug( 254):
SEND_TO_GPA: <request><type>disconnect</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:23:833 Debug( 193):
RECV_FROM_GPA: <response><type>status</type><state>Disconnected</state><error></error><user-name>USERCONTOSO</user-name><network-type></network-type><gateway-list><gateway><name>vpn1.CONTOSO.com</name><ip>vpn1.CONTOSO.com</ip><tunnel>no</tunnel><priority>-1</priority><auth>no</auth><internal>no</internal></gateway></gateway-list><portal-status>Invalid portal</portal-status><last-url>vpn1.CONTOSO.com</last-url><disable>no</disable><on-demand>yes</on-demand><pan-fips-initialization-status>0</pan-fips-initialization-status></response>
P4059-T-1953818304 02/07/2025 12:08:24:034 Debug( 193):
RECV_FROM_GPA: <response><type>disconnect</type><state>Disconnected</state><error></error><portal-status>Invalid portal</portal-status><last-url>vpn1.contoso.com</last-url><disable>no</disable><on-demand>yes</on-demand><pan-fips-initialization-status>0</pan-fips-initialization-status></response>

Re: GP 6.2.1 stopped to work on Linux

LPinchon — Fri, 07 Feb 2025 11:41:07 GMT

pangps.log

topic GP 6.2.1 stopped to work on Linux in GlobalProtect Discussions

GP 6.2.1 stopped to work on Linux

Re: GP 6.2.1 stopped to work on Linux

Re: GP 6.2.1 stopped to work on Linux