topic Re: Clientless VPN getting worse with each PANOS ver in General Topics

Clientless VPN getting worse with each PANOS ver

hshawn — Fri, 25 Mar 2022 23:42:40 GMT

Timeline of my struggles:

Somewhere between 10.1.0 and 10.1.4 the clientless VPN stopped showing icons for each app not super big deal because the apps still worked but after trying a couple upgrades...

10.1.5: brings the icons back! but now the apps themselves do not work at all

trying by IP to rule out DNS issues

trying with https in case its something to do with http/80

ok ok let's try 10.2: clientless VPN portal page apps are all gone! page is blank! No apps, no icons, nothing here

downgraded back to 10.1.4 again: apps work but no icons I guess we are stuck on 10.1.4 forever?

What is going on? Is there some magic toggle added that was not required prior to 10.1.x or is this just a hot mess of clientless bugs? 🙂

UPDATE: Traffic logs show no attempts and no traffic from the VPN zone so I cannot even do a pcap. The 404 errors are coming from the firewall/portal itself before it even gets to reverse proxy to the app on the inside.

Re: Clientless VPN getting worse with each PANOS ver

hshawn — Mon, 28 Mar 2022 15:05:08 GMT

@honardsin I am not sure I understand this response, I was already using clientless VPN and it was working great until later releases of PANOS. Clientless VPN is so broken right now that even the release notes for the latest version of the clientless VPN dynamic update errors out

An error occurred while processing your request.

Reference #199.bb92d817.1648479788.8547a35

Re: Clientless VPN getting worse with each PANOS ver

Adrian_Jensen — Mon, 28 Mar 2022 15:53:06 GMT

@hshawn Please ignore the "honardsin" reply. It is a spam bot posting generic replies, copied from other sites, which will later be edited to include spam/phishing links. Flag the post as inappropriate content.

Re: Clientless VPN getting worse with each PANOS ver

hshawn — Mon, 28 Mar 2022 15:57:02 GMT

Thanks for the info. reported

Re: Clientless VPN getting worse with each PANOS ver

JHenricks — Thu, 31 Mar 2022 02:10:49 GMT

I got the clientless VPN (hosted on VLAN interface) to work again on 10.1.3. Here's what I did in case it helps anyone.

Downgraded from 10.2 to 10.1.3 (after exporting a named snapshot externally)
Downgraded from 10.1.3 to 10.0
Upgraded from 10.0 back to 10.1.3
Loaded the previously exported named snapshot (step 1)

No idea if all those steps were necessary, but it seems to work now. One odd behavior was that existing user accounts (local db) would not open the clientless app on the first attempt (logs showed deny), however, the exact same user attempting again would work (logs showed allow). Very strange. I'm afraid to upgrade further until another maintenance release comes out. For now, I am holding my breath. Good luck!