topic GlobalProtect "Tunnel is down due to keep-alive timeout" in GlobalProtect Discussions

GlobalProtect "Tunnel is down due to keep-alive timeout"

LeifAlire — Mon, 28 Jul 2025 19:01:34 GMT

User on Windows 11 computer is getting "Tunnel is down due to keep-alive timeout", internet is still connected for the user, and this happens very frequently for the user, no other users are reporting similar issues, anyone come across this before and resolve? User connects via wif-fi on home network.

PanOS version 10.2.13 HF5

GlobalProtect Agent version 6.2.8

Re: GlobalProtect "Tunnel is down due to keep-alive timeout"

JayGolf — Tue, 29 Jul 2025 05:05:44 GMT

Hi @LeifAlire ,

The keep-alive timeout being exceeded can mean a number of things like network connectivity of the client, high cpu from the client side, or a device in between that's dropping the connection (perhaps within the ISP or home router). Its almost like troubleshooting intermittent network connectivity issues and the best way to get to the root of it is to run a packet capture. Id recommend starting out with this helpful KB: How to troubleshoot when Global Protect gateway tunnel gets disconnected due to "keep-alive timeout"

Let us know what you find in the packet captures and if you would like a second-eye!

Re: GlobalProtect "Tunnel is down due to keep-alive timeout"

LeifAlire — Fri, 01 Aug 2025 18:42:02 GMT

I changed the user to a different GlobalProtect config with a lower MTU from the default 1400 to 1260 and that appears to have resolved the issue.