topic Re: Known issue (Issue ID: PAN-227368) with version 11.0.2. Will it be solved by 11.1.0-h2 to upgrade? in Next-Generation Firewall Discussions

Known issue (Issue ID: PAN-227368) with version 11.0.2. Will it be solved by 11.1.0-h2 to upgrade?

Karthi_N — Thu, 18 Jan 2024 16:11:36 GMT

Change : We have upgrade to 11.0.2 post upgrade facing below issue.
Issue ID: PAN-227368

Issue Statement : The GlobalProtect app cannot connect to a portal or gateway and GlobalProtect Clientless VPN users cannot access applications if authentication takes longer than 20 seconds.
Workaround: Increase the TCP handshake timeout to the maximum value of 60 seconds.

Re: Known issue (Issue ID: PAN-227368) with version 11.0.2. Will it be solved by 11.1.0-h2 to upgrade?

iarobertson — Thu, 01 Feb 2024 01:07:11 GMT

Hello @Karthi_N - yes, PAN-227368 is resolved in 11.1.0 and subsequent hotfixes.

Re: Known issue (Issue ID: PAN-227368) with version 11.0.2. Will it be solved by 11.1.0-h2 to upgrade?

DevPatel — Fri, 01 May 2026 10:06:33 GMT

I am also getting this issue on a single Mac at the moment. im on PAN OS 11.1.6-H10.
the monitor logs is showing session end as decrypt-error. the timeout is by default set to 60secs. any ideas?