topic Re: GlobalProtect VPN SSL - disconnect in GlobalProtect Discussions

GlobalProtect VPN SSL - disconnect

DLONGPRÉ — Thu, 30 Apr 2020 13:07:56 GMT

Hello,

I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed"

PAN-OS 9.0.7

GP Agent : 5.0.8

Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?

Re: GlobalProtect VPN SSL - disconnect

Mick_Ball — Thu, 30 Apr 2020 14:01:09 GMT

are these users on cable or wifi,

I only ask as we had a similar issue with the same socket closed error but it was OK when the user connected to their router via a cable, we installed a different wifi interface driver and this resolved the issue.

there was a pointer to this failure in the windows event log, perhaps look there for some other clues.

Re: GlobalProtect VPN SSL - disconnect

DLONGPRÉ — Thu, 30 Apr 2020 23:57:55 GMT

There are on "wired" network, not WIFI. I will try a GP agent update to see if its better.

Re: GlobalProtect VPN SSL - disconnect

Mick_Ball — Fri, 01 May 2020 04:56:35 GMT

Ok but this may still be a nic driver issue. I would still check the windows event log.

Re: GlobalProtect VPN SSL - disconnect

recross — Mon, 04 May 2020 16:50:47 GMT

Do you have HIP Checks enabled? If you do and are not using them, un-check the "collect HIP data" on the portal settings. As this, even with Always on, enacts the inactivity timer configured under that gateway. We encountered a similar constant drop in connection when leveraging SSL, disabling HIP collection corrected it. Seems like the expected behaviors do not always function as expected.

Re: GlobalProtect VPN SSL - disconnect

TCSSecurity — Wed, 14 Oct 2020 22:40:28 GMT

We also facing same problem and HIP check is mandatory since we proving access only if HIP matched, is it a bug or any solution available ?