topic GlobalProtect - RPC connections fail in General Topics

GlobalProtect - RPC connections fail

bcsgroup — Tue, 17 Jun 2014 23:45:02 GMT

Hi All,

I seem to be unable to get this to work but when connected via GlobalProtect VPN remotely all RPC server communication fails. This can be seen with any of the following tasks:

Open Active Directory Users and Computers

Open Group Policy Management

Attempt to connect to a DFS file share

attempt to update group policy with GPUpdate command line options

Attempt to open the security tab in the properties of a folder on a shared network location

Any attempt to do name look-ups to Active Directory.

I have a support case open but was wondering if anyone else can confirm this as well? I have tried all versions of GPAgent from 1.2.7 through 2.0.3

Re: GlobalProtect - RPC connections fail

pulukas — Thu, 19 Jun 2014 22:19:41 GMT

With the type of services you list, I wonder if you are getting good internal DNS resolution after the Global Connect is started.

Re: GlobalProtect - RPC connections fail

bcsgroup — Thu, 19 Jun 2014 22:25:25 GMT

Hi, Yes DNS works fine and that had been my thoughts so I was playing with the DNS search list to no avail. I then found that in the months leading up to the problem this traffic was being logged in the threat log as informational (MS RPC is listed as a threat) but working with PA support we have found that a couple of weeks ago it changed from logging to dropping packets so they are looking into why this is now.

Re: GlobalProtect - RPC connections fail

pulukas — Thu, 19 Jun 2014 22:29:17 GMT

Interesting issue. So did you end up with a custom profile to ignore this particular threat signature for the traffic until the signature is fixed?

Re: GlobalProtect - RPC connections fail

bcsgroup — Thu, 19 Jun 2014 22:36:18 GMT

Unfortunately not as even removing all threat scanning and other profiles the traffic is still dropped. Sometimes it goes through and everything works just long enough for you to get your hopes up and think you fixed it then it stops again.