topic GlobalProtect 5 for IOS blocking network stack access in General Topics

GlobalProtect 5 for IOS blocking network stack access

NeilR — Mon, 09 Dec 2019 22:10:01 GMT

Just recently had a couple of instances where the GlobalProtect client was not allowing network access. ios 13.2.3 and GP 5.0.9-11

An established login to a mixed WPA home network would not connect, even though showing authenticated, no wifi bars. Same with cell service - bars, but no throughput. After reboot, router reset, ios network reset etc, deleting the GP client freed up both networks. Reinstalling allowed vpn connection again.

Back at work, the WPA2 enterprise connection, erased previously, would not authenticate - just spinning cursor - until the GP app was deleted. In this case there was a certificate to trust. After connection, then re-installation of GP, the authentication was no longer blocked.

Any ideas on what is happening? thx

Re: GlobalProtect 5 for IOS blocking network stack access

reaper — Tue, 10 Dec 2019 08:43:24 GMT

is split tunneling enabled and/or is access to the local network allowed?

Re: GlobalProtect 5 for IOS blocking network stack access

NeilR — Thu, 02 Jan 2020 18:20:22 GMT

split tunneling is enabled and local access is allowed. Only networks on the internal company net are specified as included access routes.

This may have been an IOS and/or globalprotect version issue - have not seen it since recent version updates:

GP 5.1.0-54 and IOS 13.3.

Re: GlobalProtect 5 for IOS blocking network stack access

NeilR — Fri, 31 Jan 2020 18:09:40 GMT

Not resolved. This was specifically triggered by my account password change on our internal Active Directory system that's provide user auth via LDAP. Same issue - both wifi & cell data network access blocked until GP app deleted and then it was possible to download, install and re-connect to the gateway.

IOS 13.3 and GP 5.1.1-5. Same issue on iphone Xr and ipad pro.

Related to the time delta after changing pw in Windows and finally changing pw on ios? 12 hours during which the app is banging away with a password alert - maybe a stack overflow of some kind.