topic Global Protect - Using Cached Portal in General Topics

Global Protect - Using Cached Portal

DLONGPRÉ — Fri, 21 Feb 2020 14:00:37 GMT

Hi guys,

Is there any configuration pre-requisite to make the Global Protect APP (Client) using the "cached portal" information to built the Gateway tunnel is case of Portal failure or unavailable ? I tried with/without "Save User Credential"... with/without "Allow user to Sign Out..." ... etc.

I never been able to make it work ...!

Global Protect APP 5.1.0-75

PAN-OS 9.0.4

Thanks,

Re: Global Protect - Using Cached Portal

BPry — Fri, 21 Feb 2020 21:59:15 GMT

@DLONGPRÉ,

I would personally switch to GP 5.0.8 and see if that addresses the issue. I've found a few issues with 5.1.0 and I wouldn't be entirely surprised if you aren't running into some sort of bug.

The only real prereq for the cached portal configuration to work properly, you really just need the credentials to be entered or saved. Once that's done and it attempts to reach out to the portal, it will use the cached portal configuration if it can't reach the portal.

Re: Global Protect - Using Cached Portal

DLONGPRÉ — Mon, 24 Feb 2020 15:37:31 GMT

@BPry

It seem to work great with 5.0.8-4. So, it's look like a bug.

Re: Global Protect - Using Cached Portal

BPry — Mon, 24 Feb 2020 22:35:10 GMT

@DLONGPRÉ,

I would reach out to TAC and open a case on it, just so that PAN actually knows that the bug exists within 5.1. I would continue to stay away from 5.1 for a bit yet though, it appears to need more than a handful of bug fixes.

Re: Global Protect - Using Cached Portal

DLONGPRÉ — Tue, 25 Feb 2020 01:38:24 GMT

@BPry

Great!

5.1.1 has just been released. Wondering if that fixe it. I will give a try.