GlobalProtect 5.2.x issues

sebastianvd — Tue, 09 Feb 2021 10:42:02 GMT

We have migrated our users from an physical environment with 3250's/8.1.15 GP5.1.X to virtual appliances in Azure 9.1.6/5.2.X

We have had lots of issues which mainly drilled down to MTU issues as Azure has some own behaviour policies on that.

(Max MTU 1400, Blocking ICMP, Dropping out of order fragments).

But now we experience random issues with mainly exclusions of applications and/or domains.

For example, youtube has been excluded by using the video exclude option but we also excluded all other youtube traffic, youtube.com and googlevideo.com.

Somehow sometimes still youtube traffic is seen on the firewall, despite these exclusions.

Some collegue's have found workarround by reinstalling/repairing the agent which results to a working situation again.

Another example:Outlook

As we had those MTU issues we weren't aware of, we've tried to exclude outlook.exe as workarround.

Sometimes Outlook connects both using the gptunnel and the local network and sometimes the exclusion works... How ?

I don't have a clue.

As the problems are inconsistent and can not be forced it is hard to prove to TAC what is wrong.

In my believe 5.2.X has some issues in stability of applying the config.

Do people here see similar issues?

topic GlobalProtect 5.2.x issues in GlobalProtect Discussions

GlobalProtect 5.2.x issues