topic Problem with GlobalProtect in General Topics

Problem with GlobalProtect

Bittereinder — Mon, 22 Apr 2019 13:18:30 GMT

Hello all!

I have a problem with GlobalProtect. It happens that if GlobalProtect is connected to the gateway and the carrier connecton of the client goes down (3G, wi-fi, etc.) the GlobalProtect itself does not advice of the disconnection and it does not tear down the VPN, so the user must stop and start manually the connection

Is there something that I am missing with the configuration?

Thanks in advance

Re: Problem with GlobalProtect

Brandon_Wertz — Mon, 22 Apr 2019 20:06:03 GMT

I've recently migrated my company from from AnyConnect to GP, version 4.1.6. I've had similar reports of issues. Also centered around less than optimal / consistent connectivity mediums.

My company has some private jets with onboard Internet connectivity provided via Go-Go wireless (Same as on commercial airlines). I've had users report that GP VPN said it was "connected" but the users had no connectivity otherwise. I've also had users report about similar experiences when using the hotspot functionality via their mobile phones.

Unfortunately I've not been able to identify a cause / fix to this point.

Re: Problem with GlobalProtect

BPry — Tue, 23 Apr 2019 02:41:42 GMT

@Bittereinder,

This has been an issue I've experienced since utilizing GlobalProtect years ago. Spotty connections will cause GlobalProtect to stay connected, even if the connection itself isn't capable of actually passing anything more than ICMP requests with high loss. If the client actually loses connection fully, then it works as expected.

It hasn't been a pressing issue for any of my users or the companies that I support, so I haven't dug too far into it. But as far as I can tell it's limited to networks with high packet loss displaying this condition.