topic Re: connectivity problem with GP in General Topics

connectivity problem with GP

Radmin_85 — Tue, 23 Jan 2018 08:13:41 GMT

Users complain Global Protect vpn client performance problem. There is shown ping time more than 1000ms after I disconnect then reconnect there is shown less than 150ms. Below photo after and before connection via GP

Re: connectivity problem with GP

BPry — Tue, 23 Jan 2018 15:21:02 GMT

@Radmin_85,

Do you know how long the user had actually been connected to GP, and whether or not it was utilizing SSL or IPSec at the time?

Re: connectivity problem with GP

Radmin_85 — Tue, 23 Jan 2018 15:23:39 GMT

IT haapens not in all users (all users are about 350).It happens in 5-10 users.I want to mention that the whole system is in Azure.and all users connect through GP.

And another point is when you reconnect GP it works normal.Is it any issy with ipsec or ssl?i dont have exact info about it

Re: connectivity problem with GP

BPry — Tue, 23 Jan 2018 17:55:35 GMT

@Radmin_85,

I would start by taking note of how long GP has been up when you have to reconnect the user; I've seen issues in the past with users leaving GP connected where it would slow down until a reconnect if you allowed a long idle or inactivity timeout configuration.

My guess would be that you find these users have an abnormally long connection time; which is why the reconnect addresses the issue and why you have very few users experiancing the issue.

Re: connectivity problem with GP

Radmin_85 — Tue, 23 Jan 2018 18:42:35 GMT

you mean long idle time? where one can configure it in the system?

Re: connectivity problem with GP

BPry — Tue, 23 Jan 2018 18:44:43 GMT

@Radmin_85,

Under Network > GlobalProtect > Gateways > $Gateway > Agent > Timeout Settings

This will have Login Lifetime, Inactivity Logout, and Disconnect on Idle settings.