topic Re: Failed to create tunnel with gateway in GlobalProtect Discussions

Failed to create tunnel with gateway

Stefan_Somogyi — Wed, 09 Apr 2025 07:14:42 GMT

We have some Windows 11 clients in our environment, which cannot create a tunnel to the gateway. The Global Protect Version is 6.2.7-1047.

In the PanGPS.log, I see the following errors:

connect failed with 5 seconds timeout. Failed to connect to captive.apple.com on 80 with return value -1 and socket error 0(0) TSLog: Set error_stage = Tunnel creation, error = Failed to get default route entry SetRoutes: GetRouteTableEntry(172.28.xxx.xx) failed Error setting routes add ipv4 address failed. 0x2-0. FindAndUpdateAdapterAddress failed. SetupNetwork() failed sslvpn failed to start CreateTunnel: SetConfig() failed --Set state to Connection failed failed to create tunnel with gateway xxxx.gw.gpcloudservice.com NetworkDiscoverThread: failed to discover external network. local system error, set error as The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon. If the issue persists, try restarting your system.

This happens in the corp net and from remote. The only solution is to reboot the client.

The entry "Connection to captive.apple.com failed" in the log is really strange, since the user neither owns an iPhone nor uses a hotspot from a mobile phone to his laptop.

Reproduction:

The user shutdown the notebook after work
Start up the notebook in the morning and log into windows 11
The Global Protect APP tries to connet to the gateway
After a few attempt, the Error message "Status: Disconnected. The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon. If the issue persists, try restarting your system." is shown.
User restart the notebook
User log into Windows and the second attempt of the Global Protect to connect to the gatway is always successfully.
After the connection is successful, the connection to the gateway remains without problems during the day.

Any help would be appreciated

Re: Failed to create tunnel with gateway

emr_1 — Wed, 09 Apr 2025 07:38:03 GMT

In Addressed issues of 6.2.8, it sounds similar to your issue:

https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-release-notes/globalprotect-addressed-issues/globalprotect-app-6-2-8-windows-and-macos-addressed-issues

GPC-21653	Fixed an issue where the GlobalProtect virtual adapter was not set up correctly.

I'm not sure you are hitting this issue, though if you have any chance, try with the latest and see how it goes.

Re: Failed to create tunnel with gateway

Stefan_Somogyi — Wed, 09 Apr 2025 11:29:17 GMT

Thank you for the referenced issue. I have seen this, but the details to the issue doesn't match. But I'll give it a try. We need to package the new version and this will take some time.

Re: Failed to create tunnel with gateway

Stefan_Somogyi — Mon, 12 May 2025 06:15:42 GMT

Since we have updated to the version 6.2.8, the problem seems to be solved. The issue didn't occur anymore.