Help me troubleshooting my globalprotect setting

qq736401987 — Sat, 10 Jun 2017 13:21:55 GMT

Hi All,

My pan-os is 7.1.1.

I want to setup sslvpn for my co-works. Here is my globalprotect setting screenshot http://pan.baidu.com/s/1ccW1h8#list/path=%2Fpaloate

Could you take a look and tell me where I wrongly configured?

Once my globalprotect client try to connect, I get the following error

(T5200) 06/10/17 21:09:38:717 Error(3650): NetworkDiscoverThread: UNKNOWN_NETWORK (internal host detection is not set) and internal gateway list is empty.

(T5200) 06/10/17 21:09:38:717 Error(2271): Failed to convert remote host mysslvpn of gateway mysslvpn.

(T5200) 06/10/17 21:09:38:717 Error(3733): NetworkDiscoverThread: failed to discover external network.

(T5200) 06/10/17 21:10:08:717 Error(9092): GetClientIpForGateway(): invalid remote host: .

(T5200) 06/10/17 21:10:08:717 Error( 178): CPanGatewayList::SelectInternalGateways() - failed to retrieve client source ipv6!

(T5200) 06/10/17 21:10:11:267 Error(4312): getaddrinfo failed with error 11004

(T5200) 06/10/17 21:10:11:267 Error(1608): m_portalCfg is NULL

(T5200) 06/10/17 21:10:11:267 Error(3650): NetworkDiscoverThread: UNKNOWN_NETWORK (internal host detection is not set) and internal gateway list is empty.

(T5200) 06/10/17 21:10:11:267 Error(2271): Failed to convert remote host mysslvpn of gateway mysslvpn.

(T5200) 06/10/17 21:10:11:267 Error(3733): NetworkDiscoverThread: failed to discover external network.

(T2540) 06/10/17 21:10:38:167 Error( 43): Connect to captive portal clients3.google.com:80 Failed

(T5200) 06/10/17 21:10:41:267 Error(9092): GetClientIpForGateway(): invalid remote host: .

(T5200) 06/10/17 21:10:41:267 Error( 178): CPanGatewayList::SelectInternalGateways() - failed to retrieve client source ipv6!

(T5200) 06/10/17 21:10:43:817 Error(4312): getaddrinfo failed with error 11004

(T5200) 06/10/17 21:10:43:817 Error(1608): m_portalCfg is NULL

(T5200) 06/10/17 21:10:43:817 Error(3650): NetworkDiscoverThread: UNKNOWN_NETWORK (internal host detection is not set) and internal gateway list is empty.

(T5200) 06/10/17 21:10:43:817 Error(2271): Failed to convert remote host mysslvpn of gateway mysslvpn.

(T5200) 06/10/17 21:10:43:817 Error(3733): NetworkDiscoverThread: failed to discover external network.

(T5200) 06/10/17 21:11:13:817 Error(9092): GetClientIpForGateway(): invalid remote host: .

(T5200) 06/10/17 21:11:13:817 Error( 178): CPanGatewayList::SelectInternalGateways() - failed to retrieve client source ipv6!

(T5200) 06/10/17 21:11:16:367 Error(4312): getaddrinfo failed with error 11004

(T5200) 06/10/17 21:11:16:367 Error(1608): m_portalCfg is NULL

(T5200) 06/10/17 21:11:16:367 Error(3650): NetworkDiscoverThread: UNKNOWN_NETWORK (internal host detection is not set) and internal gateway list is empty.

(T5200) 06/10/17 21:11:16:367 Error(2271): Failed to convert remote host mysslvpn of gateway mysslvpn.

(T5200) 06/10/17 21:11:16:367 Error(3733): NetworkDiscoverThread: failed to discover external network.

Re: Help me troubleshooting my globalprotect setting

TranceforLife — Sat, 10 Jun 2017 16:12:45 GMT

The very first thing l have spotted that your gateway "mysslvpn" is not in the FQDN format. Your client is trying to connect to the "mysslvpn" but doesn't know how to resolve it.

Re: Help me troubleshooting my globalprotect setting

qq736401987 — Sun, 11 Jun 2017 02:23:24 GMT

Thank you. I re-configure my setting according to this reference

https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-On-Demand/ta-p/131591

Now it works.

topic Re: Help me troubleshooting my globalprotect setting in General Topics

Help me troubleshooting my globalprotect setting

Re: Help me troubleshooting my globalprotect setting

Re: Help me troubleshooting my globalprotect setting