topic Re: Optimization tips for GlobalProtect? in General Topics

Optimization tips for GlobalProtect?

Wed, 10 Dec 2014 16:24:30 GMT

Hi Guys,

Does anyone have any optimization tips that they've done for GlobalProtect? Looking for ways to speed up auth in the event the client gets disconnected when the device switches from wifi to cellular network. What we are seeing is it disconnects but doesn't connect or it takes awhile before it reconnects. using it on iOS.

Thanks,

Re: Optimization tips for GlobalProtect?

Wed, 10 Dec 2014 16:40:35 GMT

I just found this but wouldn't mind hearing some optimization tips from some of the GP experts out there!

65401 —Resolved an issue where the GlobalProtect agent for iOS did not reconnect automatically when
switching between a WiFi network and a 3G network.

Source:

https://downloads.paloaltonetworks.com/software/GlobalProtect-2.1.1-RN.pdf?__gda__=1418272301_ff1658bd8e1b0a43ca3149d152fdd803

Thanks!

Re: Optimization tips for GlobalProtect?

mivaldi — Wed, 10 Dec 2014 21:26:21 GMT

Try the Authentication Modifier setting to "Cookie authentication for config refresh".

This option is on the Portal > Client Config > General tab.

It should help you speed up the connection.

Also check if the users are connecting using IPSec or if they fall back to SSL.

If they fall back to SSL, and there is a restriction where IPSec shouldn't be used, make sure to disable IPSec to prevent the Agent from trying over and over with IPSec until it fails back to SSL.

If your Gateway is behind NAT, make sure to forward TCP Port 443 for SSL and UDP Port 4501 for IPSec.