topic Re: fixing GP bug in newest 10.1.x versions in General Topics

fixing GP bug in newest 10.1.x versions

Jacek_Loszewski — Wed, 06 Mar 2024 08:13:23 GMT

Hi, PA users

Do you have any rumors about fixing this bug in the latest versions of 10.1.x. firmware?

Note: GlobalProtect tunnel might disconnect shortly after being established when SSL is used as a transport protocol. Workaround: Disable Internet Protocol Version 6 (TCP/IPv6) on the PANGP Virtual Network Adapter.

I have several hundred stations with GP and this error is very disturbing. And April is approaching...

Re: fixing GP bug in newest 10.1.x versions

kiwi — Thu, 07 Mar 2024 10:04:45 GMT

Hi @Jacek_Loszewski ,

Looks like it might get fixed in 10.1.12-h1
That said, PAN-242561 is already fixed in 10.2.8 if it's an option for you.

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed-issues/pan-os-10-2-8-addressed-issues

Kind regards,

-Kim.

Re: fixing GP bug in newest 10.1.x versions

Jacek_Loszewski — Thu, 07 Mar 2024 11:35:57 GMT

Thank you, @kiwi

Yes, 10.2.8 is my option and I will probably install this version.
I was planning to skip the 10.2 family but I guess it's not possible 🙂

Re: fixing GP bug in newest 10.1.x versions

Jacek_Loszewski — Fri, 08 Mar 2024 07:33:20 GMT

I found this topic https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-client-disconnect-issues-after-upgrading-to-pan/td-p/568088

and this answer:

+Fix Schedule:

...target release for fix (current latest release FYI)
...11.2.0 (not released yet)
...11.1.2 <** updated on 27th/Feb/2024 **>
...11.0.5 (11.0.3-h3)
...10.2.8 (10.2.7-h3)
...10.1.14 (10.1.12)