Strata Cloud Manage - GlobalProtect Connection Error

C.Seokgun — Thu, 06 Mar 2025 08:28:39 GMT

Hello, Live community.

This time, I deployed GlobalProtect SSL VPN in Strata Cloud Manage with SASE.

The current issue is as follows. The cover photo I uploaded is an image sent by such a user.

1. Some users cannot connect to SSL VPN with A.gpcloudservice.com.
As a result of checking the log in Log viewer > GlobalProtect in SCM, I confirmed the other party's public IP, and I can see the before-login Stage packet, Login Stage packet without Src Username, and Login Stage packet with Source Username (all three packets have Event Status = Success).

In my opinion, since SAML authentication was successful, it should be initiated to the next stage such as Configuration and Tunneling. However, some users only see normal SAML logs and the connection is not completed after that (GP Client is in Connecting status...)

2. Some other users use it normally for a while and then suddenly it doesn't work.

Sometimes, the log is displayed like Case 1. This time, a new case has appeared, and there is no log for access attempts.
It was a user who was using it normally, and even if the public IP changed, all public IPs were allowed to access it. Also, the user of this new case is a user who has not moved to another country.
It is incomprehensible that the same country, same IP, and PC that was used well before suddenly does not even leave an access attempt log.

Question: What should I suspect? Since it is an initial distribution, it was distributed preemptively only to certain users, so there is no problem such as exceeding the license.

Thank you.

topic Strata Cloud Manage - GlobalProtect Connection Error in Strata Cloud Manager

Strata Cloud Manage - GlobalProtect Connection Error