topic Re: GP issue with phone and tablet after upgrade to 7.1 in General Topics

GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Mon, 18 Apr 2016 13:27:44 GMT

Hi All,

It seems we facing issue after upgraded to 7.1.0 with Smartphone and Tablet with GP client:

This VPN remote access works properly before upgrade.

Anyone has this issue?

Suggestions?

Best Regards

Luca

Re: GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Mon, 18 Apr 2016 14:27:17 GMT

We are trying to establish VPN tunnel on settings with Ios.

Sorry I have attached wrong screenshot.

This below it's right screenshot:

-------------------------------------

In English says:

Connection VPN

Negotiation with VPN Server failed

Re: GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Mon, 18 Apr 2016 15:46:38 GMT

Hi these are relevant log from PA:

-----------------------------------------

-------------------------------------------------

Best Regards

Luca

Re: GP issue with phone and tablet after upgrade to 7.1

jsotech — Mon, 18 Apr 2016 19:11:46 GMT

We experienced this as well with Linux/mobile clients connecting via IPsec. PA recommended to roll back to our previously working PAN-OS version (7.0.5h-2 in our case), which did resolve our issue. We didn't get a report on what fix (if any) are currently in the works, so we're sticking with 7.0.x for now. 🙂

Re: GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Tue, 19 Apr 2016 07:42:27 GMT

Hi @jsotech,

Thanks a lot for you response.

Yeap I have tested it on different enviroments and behavior is the same.

I wrote on community because, I just want to know if someone has found any workaround on this.. But I suppose this is simply a bug of 7.1 major release.

I will wait with you for 7.1.1 or a fix for that; at this moment I'm doing roll-back to the previous version.

Anyone facing this issue too?

Best Regards

Luca

Re: GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Tue, 19 Apr 2016 10:39:35 GMT

Upgraded to 7.1.1 .. Same issue 😞

Re: GP issue with phone and tablet after upgrade to 7.1

Jacopo_Vigano — Tue, 19 Apr 2016 10:56:34 GMT

Hi Luca,

with PAN 7.0.5-h2 it works fine. It seems the problem is related on PANOS 7.1.x

Thanks.

Jacopo

Re: GP issue with phone and tablet after upgrade to 7.1

MN — Thu, 21 Apr 2016 10:53:17 GMT

Hi Folks,

The issue was already investigated by the Engineering team and they found a problem in config migration to 7.1 release.

There is a workaround available:

From CLI configure:

# set global-protect global-protect-gateway <gateway name> client-auth auth-any os Any
# commit

Dev. created a fix which will be tested and included in one of the following maintenance releases.

Cheers,

Marian

Re: GP issue with phone and tablet after upgrade to 7.1

TheRealDiz — Thu, 21 Apr 2016 12:19:52 GMT

Thanks Again @MN !!!!

:))