topic GlobalProtect software is not downloading from the gateway portal in General Topics

GlobalProtect software is not downloading from the gateway portal

TranceforLife — Wed, 21 Sep 2016 08:48:37 GMT

Hello Guys,

GlobalProtect software is not downloading from the gateway portal even though it is already activated.

Clients get stuck on “<panos version>.msi starting”

Any thoughts?

Thank you,

Myky

Re: GlobalProtect software is not downloading from the gateway portal

reaper — Thu, 22 Sep 2016 10:04:19 GMT

did you check the threat log in case the msi is being blocked by a file blocking profile ?

Re: GlobalProtect software is not downloading from the gateway portal

TranceforLife — Thu, 22 Sep 2016 13:34:27 GMT

Hello Reaper,

Yes have checked. Nothing there. One of our PS engineers currently checking this and it seems like NAT issue. We need to create a bi-directional rule and test it again. Will update this post later.

Thanks,

Myky

Re: GlobalProtect software is not downloading from the gateway portal

TranceforLife — Mon, 26 Sep 2016 13:34:44 GMT

Hello,

Changing NAT to the bi-directional didn't fix the problem. Has anyone had this issue before? So the client is authenticated as it should, then portal is presented options to download 32, 64 and Mac version of GP. You then "clicking" on the version you need, it shows up in the browser as "download started" and get sucked on 0 kb.

Thx,

Myky

Re: GlobalProtect software is not downloading from the gateway portal

reaper — Mon, 26 Sep 2016 13:36:55 GMT

just a couple more things you could try: re-activate the GP client

> request global-protect-client software activate version <version>

or a commit force and finally a DP restart

Re: GlobalProtect software is not downloading from the gateway portal

TranceforLife — Mon, 26 Sep 2016 14:10:59 GMT

Thanks . I will try to reinstall it but initially, it stopped working on 2.3.2 version. So we installed 3.0.0 after still the same.

Do you know if there is a way to see if GP agent actually pushed to the client? maybe some CLI command or session kb check.

Re: GlobalProtect software is not downloading from the gateway portal

TranceforLife — Tue, 27 Sep 2016 08:39:57 GMT

ok so once l am authenticated and connected to the GP portal l am creating two separate sessions, once clicked to download a file ssl and web-browsing both on port 443 (for the file downloads or GP msi agent). Below screenshot from my lab where GP works fine: