topic GlobalProtect Portal Connection retry count setting in Prisma Access Discussions

GlobalProtect Portal Connection retry count setting

Y.Tsushima — Thu, 30 Jan 2025 02:41:22 GMT

Hello everyone,

I would like to know about the settings and specifications of GlobalProtect.
*I am using a Prisma Access Cloud Managed environment.

I would like to be able to connect to the portal for the first time as much as possible even in situations where communication is somewhat unstable.

1. Is it possible to set the number of retries for connecting to the portal?
If so, please tell me how to set it.

2. If it is not possible to set it, how is the number of retries determined as a specification?

I looked at the settings screen and could not find the relevant item.

I apologize for the inconvenience, but I would appreciate your assistance.

Re: GlobalProtect Portal Connection retry count setting

Y.Tsushima — Thu, 30 Jan 2025 09:47:14 GMT

@kevin458

Thank you for your reply.

I understand that the retry count cannot be explicitly set.

Is there any information on how many times the retry count is implicitly set? (I'm checking the operating specifications.)

Re: GlobalProtect Portal Connection retry count setting

nikoolayy1 — Sun, 02 Feb 2025 20:45:07 GMT

Interesting question, you could try always-on VPN (under connection settings) with GlobalProtect — Customize App Settings with ""Connection Behavior Settings" that could be set to 2 seconds as maybe after the default 5 seconds is to much then it should try again but I have not tested this.

GlobalProtect Always On VPN Configuration

Other than if the issue is with when the user writes their username and pass and the communication to the auth server is having issues then the default "30" seconds for TCP receive could be lowered or you can configure the retries to the auth server under the authentication profile .

See:

Error message: Connection Failed. Could not connect to the Glob... - Knowledge Base - Palo Alto Networks

Keep in mind because of Guidelines for Setting Authentication Server Timeouts as I think the webserver timeout can't be set cloudmanaged prima access you need to modify the authentication profile to do retries in max 30 sec.

Please test and say if it helped.