topic Re: Cannot connect to GlobalProtect in General Topics

Cannot connect to GlobalProtect

Farzana — Wed, 06 Sep 2017 06:57:38 GMT

Hi,

Just need bit of a direction on what to check for this issue. Two users can't connect to the globalprotect vpn.

One user: Windows 8.1 - can't connect (shows connecting forever) and another one: Windows 10, seems to connect and disconnect straight away.

Logs from PANGP shows:

362): InitConnection ...
(T8796) 09/06/17 05:49:46:934 Error( 366): Cannot connect to service, error: 10022
(T8796) 09/06/17 05:49:51:934 Info ( 362): InitConnection ...
(T8796) 09/06/17 05:49:51:934 Error( 366): Cannot connect to service, error: 10022
(T8796) 09/06/17 05:49:56:934 Info ( 362): InitConnection ...
(T8796) 09/06/17 05:49:56:934 Error( 366): Cannot connect to service, error: 10022
(T8796) 09/06/17 05:49:57:934 Debug( 229): CPanSocket::onConnect - return error code = 10060.
(T8796) 09/06/17 05:50:01:934 Info ( 362): InitConnection ...
(T8796) 09/06/17 05:50:01:934 Info ( 370): Connecting to Pan MS Service end
(T8796) 09/06/17 05:50:05:028 Debug( 73): CTranslate: dwSidLen is 24
(T8796) 09/06/17 05:50:05:044 Error( 335): Failed to remove value 'LastUrl'
(T8796) 09/06/17 05:50:05:044 Debug( 73): CTranslate: dwSidLen is 24
(T8796) 09/06/17 05:50:05:044 Debug( 321): Proxy server auto config Url: h
(T8796) 09/06/17 05:50:05:044 Debug( 73): CTranslate: dwSidLen is 24
(T8796) 09/06/17 05:50:05:059 Debug( 435): CPanGASetting:OnBnClickedSave - resend credentials

Thanks in advance.

Re: Cannot connect to GlobalProtect

mgarg — Wed, 06 Sep 2017 08:38:33 GMT

Do you see PanGPS service running under the task manager for these users?

Re: Cannot connect to GlobalProtect

Farzana — Wed, 06 Sep 2017 23:06:34 GMT

The users were able to connect before using GP ver 3.1.4-7.

Furthermore the users can login via a different PC using the same credential .

But from their pc they are not able to connect to GP using their or even some other account.

Any thoughts on this?

Re: Cannot connect to GlobalProtect

mgarg — Thu, 07 Sep 2017 04:07:00 GMT

This seems to be more of a client issue than anything related to firewall. From the logs that you posted earlier, it looks like the Pan agent is not able to start the pan gp service.

Could you please confirm if the PANGPS service is running under Task manager > Services.

Try uninstalling the software and get rid of the Palo Alto Networks folder in Program Files.

Re install and check if this resolves. Open up a tac case if this does not work.

Re: Cannot connect to GlobalProtect

kowu — Sun, 14 Jan 2018 08:02:05 GMT

I have the same issue with this, Why have lots of this issue.

Re: Cannot connect to GlobalProtect

pcharadia — Sun, 14 Jan 2018 09:19:00 GMT

There is a problem with the PanGPA service's connection to the PanGPS service on the same workstation.

PanGPS service should be listening on localhost port 4767. To check run the command on windows pc

netstat -an | find "4767"

output should be listening.

try telnet to the port 4767

pls try turning off end system firewall.

Re: Cannot connect to GlobalProtect

BPry — Mon, 15 Jan 2018 13:55:16 GMT

@pcharadia,

I wouldn't advise people to turn off the end-system firewall, even for testing that simply isn't a very good 'solution' to anything.

Re: Cannot connect to GlobalProtect

BPry — Mon, 15 Jan 2018 13:58:30 GMT

@kowu,

With GlobalProtect issues the order of troubleshooting should really be the following:

1) Verify that PANGPS service is running under Services.

2) Uninstall GlobalProtect and delte the Palo Alto Networks folder in Program Files.

3) Restart

4) Reinstall GlobalProtect

5) Verify Connectivity

If that doesn't work open up a TAC case so that they can take a look at it with you. GlobalProtect is a very picky program that can be tripped up by other software much easier than other VPN clients.

Re: Cannot connect to GlobalProtect

AshutoshK — Fri, 20 Dec 2019 10:44:09 GMT

After un-installation of antivirus and firewall,.. error still exist..

Re: Cannot connect to GlobalProtect

AshutoshK — Fri, 20 Dec 2019 10:47:24 GMT

Windows 10 FU 1709--- GP Client 5.0.4

Re: Cannot connect to GlobalProtect

BPry — Fri, 20 Dec 2019 15:13:21 GMT

@AshutoshK,

Can you provide the error that you are actually running into and the steps that you have taken to troubleshoot?

FYI,

1709 is currently only getting updates for Enterprise and Education editions; if you are using any other version of Windows 1709 hit EoS a while ago and I would recommend upgrading the machine. Not that this has anything to do with your current issue, just that the build is largely not in service anymore.

Re: Cannot connect to GlobalProtect

AshutoshK — Fri, 20 Dec 2019 15:20:13 GMT

OS Build 16299.1508