Global Protect Troubleshooting

markk96 — Mon, 20 Oct 2014 18:49:42 GMT

I have a portal and 3 gateway's setup. From my home network and a couple other home networks Global Protect works with no issues, We can disable the client, re enable it, change to different gateways on the fly and it connects right up.

Now for some others, and my dsl at work, coffee shop downstairs, they can connect to the GP Portal the primary gateway. If they disable the client and try to connect it just spins, if they try to connect to a different gateway it just spins. If they reboot it fixes the issue and they are connected to the GP Portal and Primary gateway. I can see the connection in the gateway, the client debug shows it is getting an IP offer.

This is pretty much the same log over and over

T2896) 10/20/14 13:46:17:243 Debug( 227): PsvRegister done

(T2896) 10/20/14 13:46:17:243 Debug( 23): Thread 6356 has been created.

(T2896) 10/20/14 13:46:17:243 Info ( 26): create thread 00000404

(T2896) 10/20/14 13:46:17:243 Info ( 248): CControlManager::SetupNetwork, fd=1296

(T6356) 10/20/14 13:46:17:244 Info ( 270): Start CPanMSVpn::PanMSVpnProcMonitor

(T2896) 10/20/14 13:46:17:250 Debug(1555): SaveDnsSuffixRegSettings saves UseDomainNameDevolution value 1

(T2896) 10/20/14 13:46:17:250 Debug(1580): SaveDnsSuffixRegSettings saves SearchList value bc.firm.local,firm.local

(T2896) 10/20/14 13:46:17:270 Debug(1114): FlushDNS not set or not YES, ingore flush dns cache

(T2896) 10/20/14 13:46:17:272 Debug( 255): Renewing address...

(T2896) 10/20/14 13:46:17:298 Info (1290): Waiting for IP address to be set...

(T2896) 10/20/14 13:46:17:302 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:17:302 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:17:302 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:17:302 Debug(1294): Interface IP not set yet, wait 1s

(T6356) 10/20/14 13:46:17:321 Debug( 820): VPN handle dhcp packet

(T6356) 10/20/14 13:46:17:321 Debug( 749): receive dhcp message type 1, len 300 from 02:50:41:00:00:01

(T6356) 10/20/14 13:46:17:321 Debug( 520): discover msg, client mac: 02:50:41:00:00:01

(T6356) 10/20/14 13:46:17:321 Debug( 523): offer ip10.1.1.5

(T2896) 10/20/14 13:46:18:307 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:18:307 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:18:307 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:18:307 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:19:312 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:19:312 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:19:312 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:19:312 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:20:314 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:20:314 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:20:314 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:20:314 Debug(1294): Interface IP not set yet, wait 1s

(T6356) 10/20/14 13:46:20:322 Debug( 820): VPN handle dhcp packet

(T6356) 10/20/14 13:46:20:322 Debug( 749): receive dhcp message type 1, len 300 from 02:50:41:00:00:01

(T6356) 10/20/14 13:46:20:322 Debug( 523): offer ip 10.1.1.5

(T2896) 10/20/14 13:46:21:318 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:21:318 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:21:318 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:21:318 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:22:320 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:22:320 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:22:320 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:22:320 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:23:331 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:23:331 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:23:331 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:23:331 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:24:333 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:24:333 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:24:333 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:24:333 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:25:335 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:25:335 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:25:335 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:25:335 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:26:338 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:26:338 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:26:338 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:26:338 Debug(1294): Interface IP not set yet, wait 1s

(T2896) 10/20/14 13:46:27:343 Debug(2325):

IfIndex (IPv4 interface): 16

(T2896) 10/20/14 13:46:27:343 Debug(2326):

Adapter name: {1F592256-8B1C-4F13-B7B5-74B7F505D7BF}

(T2896) 10/20/14 13:46:27:343 Debug(2327):

Adapter friendly name: Local Area Connection 2

(T2896) 10/20/14 13:46:27:344 Debug(1317): IpReleaseAddress...

(T2896) 10/20/14 13:46:27:347 Error(1321): ReleaseAndRenewAddress: IpReleaseAddress failed: An address has not yet been associated with the network endpoint.

(T2896) 10/20/14 13:46:27:347 Error(1323): IpReleaseAddress done

(T2896) 10/20/14 13:46:27:347 Debug(1325): IpRenewAddress...

(T6356) 10/20/14 13:46:27:349 Debug( 820): VPN handle dhcp packet

(T6356) 10/20/14 13:46:27:349 Debug( 749): receive dhcp message type 1, len 300 from 02:50:41:00:00:01

(T6356) 10/20/14 13:46:27:349 Debug( 523): offer ip 10.1.1.5

(T6356) 10/20/14 13:46:30:349 Debug( 820): VPN handle dhcp packet

(T6356) 10/20/14 13:46:30:349 Debug( 749): receive dhcp message type 1, len 300 from 02:50:41:00:00:01

(T6356) 10/20/14 13:46:30:349 Debug( 523): offer ip 10.1.1.5

Re: Global Protect Troubleshooting

hshah — Mon, 20 Oct 2014 18:55:54 GMT

Hi Markk96,

I had same issue with my laptop with same error. Issue was with Adapter driver. I would suggest to uninstall Ethernet driver and re-install it. That has fixed issue for me.

Bottom line is issue with end client and not firewall, its either a ethernet adapter or GP client issue.

Regards,

Hardik Shah

Re: Global Protect Troubleshooting

markk96 — Mon, 20 Oct 2014 21:33:33 GMT

That did not work for me, I have found that if I right click the PANGP Adapter when connection to my other two gateways and disable it and re enable it it will connect, but if I try to that with my portal gateway, it just spins the adapter goes to Identifying and then unidentified network and then the log does what I posted above. Only a reboot will fix it.

Re: Global Protect Troubleshooting

dreputi — Tue, 21 Oct 2014 15:04:57 GMT

Hello Mark,

In your case I see the message:

(T2896) 10/20/14 13:46:17:270 Debug(1114): FlushDNS not set or not YES, ingore flush dns cache

GP client version >1.2.9 or >2.0.3 has a fix for flushdns setting set to YES.

58852—DNS settings did not revert correctly with FlushDNS set to YES in the

GlobalProtect client registry, causing the network to become unstable until they were

reset. Updates have been made to ensure that DNS settings revert correctly to the

original DNS settings after GlobalProtect disconnects.

Let us know what client version you are using and if the above info helps.

Regards,

Dileep

Re: Global Protect Troubleshooting

markk96 — Tue, 21 Oct 2014 18:06:37 GMT

Client is 2.1.0-50

topic Re: Global Protect Troubleshooting in General Topics

Global Protect Troubleshooting

Re: Global Protect Troubleshooting

Re: Global Protect Troubleshooting

Re: Global Protect Troubleshooting

Re: Global Protect Troubleshooting