topic Re: PanGPS vs PanGPA logs on globalprotect in General Topics

PanGPS vs PanGPA logs on globalprotect

Sec101 — Wed, 13 Nov 2019 14:49:50 GMT

What is the main difference in between these log files? - I had read that one was more for the agent/gui - and one is the actual service? I do know that most of the helpful logs tend to show up in the PanGPS logs file - or so it appears. Does anyone have good feedback on this? - As far as troubleshooting the actual agent - which is better and what the main difference is?

Re: PanGPS vs PanGPA logs on globalprotect

Mick_Ball — Wed, 13 Nov 2019 16:08:20 GMT

This was asked a while ago but i cannot get the docs...

https://live.paloaltonetworks.com/t5/General-Topics/PANGPS-and-PANGPA-client-connection-flow/td-p/25521

PanGPA is described as the GlobalProtect UI program

PanGPS as the GlobalProtect service/daemon program

GPA seems to just note whats going on but the GPS details exactly what it has or is doing to achieve this.

I only ever use PanGPS. although i often cross ref with the local PA system logs as these logs display user configs, actual seen name (for username modifier), source IP, source region etc.

Re: PanGPS vs PanGPA logs on globalprotect

Sec101 — Wed, 13 Nov 2019 16:28:00 GMT

Thank you Mick. I noticed that those docs had an EOL on them. So really what you are saying is the PanGPS logs is where to look?

Re: PanGPS vs PanGPA logs on globalprotect

Mick_Ball — Wed, 13 Nov 2019 16:38:56 GMT

Yes PanGPS.

Re: PanGPS vs PanGPA logs on globalprotect

reaper — Mon, 18 Nov 2019 23:33:13 GMT

@Mick_Ball wrote:

This was asked a while ago but i cannot get the docs...

one is here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClOMCA0

the other one was archived because it was super old (2012)