topic Re: GlobalProtect not working if laptop has no internet at boot in General Topics

GlobalProtect not working if laptop has no internet at boot

mmercaldi — Thu, 11 Jul 2019 13:10:37 GMT

I have prelogon setup for globalprotect using machine certificates, so that when a laptop boots up with internet is automatically connects to globalprotect. This works perfectly fine, except for when a laptop does not have internet access. If a laptop does not have internet access, then globalprotect just errors out and does not try to reconnect once internet is restored. The error message that I get is "Invalid Portal". I do have the option setup for Portal Connection Timeout to be 600 seconds and still errors out. The icon in the taskbar showing the 3 dots moving across the globe, but when I click on the icon it just says invalid portal with the connect button. I looked at the logs and see the captiveportect drectionthread is still running but when I restore internet, globalprotect is not connecting unlesss I manually connect

Any ideas as to what I should do?

Re: GlobalProtect not working if laptop has no internet at boot

BPry — Mon, 15 Jul 2019 20:27:06 GMT

@mmercaldi,

This is a somewhat common issue that I've run into with my users and really haven't gained much traction with actually getting a fix for. You might want to open a support ticket with TAC just so they have additional logs to look at to hopefully come up with a fix in a later release.

Re: GlobalProtect not working if laptop has no internet at boot

Rob_Notman — Wed, 04 Dec 2019 15:20:20 GMT

You can set the Captive Portal Exception Timeout (I generally use 300 seconds / 5min) to allow a user a "grace period" to login to a captive portal before GP blocks access.

Setting is in Network > GlobalProtect > Portals > Agent > [Agent] > App > Captive Portal Exception Timeout