topic Re: GlobalProtect 5.2.4 client connects but suddenly unable to ping anything in General Topics

GlobalProtect 5.2.4 client connects but suddenly unable to ping anything

solarstone — Tue, 12 Apr 2022 16:10:20 GMT

Have confirmed that no changes have been made firewall-wise, nor GP agent. The client gets authenticated, assigned an IP from the pool, but is then unable to ping anything internally, and consequently can't resolved DNS. The PA hosting Global Protect is a VM in Azure, as are the onward servers.

Re: GlobalProtect 5.2.4 client connects but suddenly unable to ping anything

kiwi — Thu, 14 Apr 2022 11:14:25 GMT

Hi @solarstone ,

There isn't much info to work with.

What connection method are you using with GP ? Do you have split-tunnel (is your traffic going into the tunnel or following a different route) ?

Do the logs or global counters provide additional information ?

Some general GP troubleshooting tips can be found here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkBCAS

Cheers,

-Kiwi.

Re: GlobalProtect 5.2.4 client connects but suddenly unable to ping anything

BPry — Thu, 14 Apr 2022 15:58:58 GMT

@solarstone,

In addition to what @kiwi has already mentioned, you haven't stated if it happens to a single client or if you can reproduce the issue across all clients in your environment. That's a pretty important detail when working with what is potentially limited to a single agent installation on a sole client.

Also, just a friendly reminder that 5.2.4 as an agent is fairly behind the current release for the 5.2 agent. Might want to take a look at the release notes and think about activating a new agent bundle.

Re: GlobalProtect 5.2.4 client connects but suddenly unable to ping anything

solarstone — Wed, 20 Apr 2022 07:28:09 GMT

It is this problem basically - Solved: LIVEcommunity - I am having Pan-OS integarted user Id - LIVEcommunity - 439686 (paloaltonetworks.com)