topic Re: MacOS connection errors while using GlobalProtect VPN client 5.0.8-4 in General Topics

MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

ClintP — Thu, 26 Mar 2020 02:51:34 GMT

Hi folks,

So i'm having pretty bad vpn problems while working from home. It's been happening for a while, but now that I'm working remotely every day, it's become unbearable. I hope someone can assist.

This is how it goes: I connect to my work vpn and after some time (maybe 10-15min, sometimes longer and sometimes shorter), requests to remote systems start timing out. If I disconnect the vpn and reconnect, things go back to working. This goes on throughout the day.

To troubleshoot, I've tried the following:

run a ping in a terminal window. Pings are usually 30-50ms but when things stop working, I see my pings have jumped to 60,000 - 100,000ms and higher
i have connected a Windows laptop to the same vpn gateway and kept it running for a day. The Windows vpn never missed a beat while the Mac vpn had issues throughout the day
reinstalled GlobalProtect client

I don't have problems with connectivity when browsing the Internet and not connected to the vpn.

Can anyone suggest how to solve this?

MacOS Catalina 10.15.3

GlobalProtect VPN client 5.0.8-4

Thanks,

Clint

Re: MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

kiwi — Thu, 26 Mar 2020 11:01:05 GMT

Hi @ClintP ,

Is your GP configured to perform a HIP check ?

A HIP check happens periodically and ensures that remote hosts connecting to the company network are adequately maintained and adhere with the security standards before they are allowed access. This periodical check could impact performance.

Have you checked the processes on your system at the time the issue occurs ? Maybe some process is hogging all the resources ?

Cheers,

-Kiwi.

Re: MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

ClintP — Thu, 26 Mar 2020 12:34:14 GMT

Hi Kiwi,

Is there an easy way to tell if GP has triggered a HIP check? Maybe logs?

~~I have not noticed a process hog when experiencing the network issue. Other than network connection issues, the system is responding normally.~~ Actually, just after typing this response, the issue occurred. I checked the Activity Monitor and sorted by "%CPU" descending. Guess what, PanGPS was at the top at 100%. When I disconnect/reconnect the vpn and pings return to normal levels, PanGPS is around 1 - 3%.

What now?

Thanks.

Re: MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

kiwi — Thu, 26 Mar 2020 14:39:51 GMT

Hi @ClintP ,

Yes, please check the client logs :

HOW TO COLLECT LOGS FROM GLOBALPROTECT CLIENTS

My guess would be HIP checks are happening.

Your IT team can customize these checks but I won't recommend disabling them entirely.

See if they can finetune the settings so it doesn't use up all your device resources. If that doesn't work I'd advise to reach out to PAN support to have this investigated more thoroughly.

Cheers !

-Kiwi.

Re: MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

ClintP — Thu, 02 Apr 2020 14:12:58 GMT

Had a call with GP support and they said my issue was likely related to a bug. No concerns about HIP.

5.0.9 has just been released that supposedly fixes my problems. Fingers crossed!