topic Re: Global Protect user private IP shows 0.0.0.0 in General Topics

Global Protect user private IP shows 0.0.0.0

sahithyan.subbu — Wed, 01 Apr 2020 12:11:40 GMT

Hi team,

One of my customer experiencing a weird issue in global protect.

When Client joins the GP he get a private IP 172.16.100.230 and i can see that system logs and also in his GP Agent. When he initiates traffic i can able to see that private iP in traffic log as well but issue is when i go to see the current users in GP Gateway >Remote user, i only see 0.0.0.0 as a private IP. Why this is happening ?? I surfed for a KB article but i couldn't find one, so if you guys found one please share and if you guys possess knowledge about this issue please share it here. I can't restart the ikemgr and sslmgr because user is getting authenticated and getting the correct private IP but only in firewall i cannot see that in current connected users, so there is any demon i have to restart except for ikemgr, sslmgr and rsamgr...???

Re: Global Protect user private IP shows 0.0.0.0

kiwi — Wed, 01 Apr 2020 12:59:58 GMT

Hi @sahithyan.subbu ,

Any more details on your customer environment ?

PAN-OS version, GP version ? HA-setup yes/no?

Not entirely the same issue I suspect ... but I saw 0.0.0.0 as connected users on an HA-setup where the 2 firewalls didn't match on PAN-OS version.

Cheers,

-Kiwi.

Re: Global Protect user private IP shows 0.0.0.0

sahithyan.subbu — Wed, 01 Apr 2020 13:06:46 GMT

@kiwi Thanks for the prompt reply.

Please see the below required info's,

sw-version: 9.0.5
global-protect-client-package-version: 5.0.6

No HA.

Re: Global Protect user private IP shows 0.0.0.0

kiwi — Wed, 01 Apr 2020 15:20:00 GMT

@sahithyan.subbu

I wouldn't say this is expected 😛

Does it happen for all the users or just one ? All gateways or just one (if you have multiple) ?

Also to confirm ... everything is working fine connection wise ?

Re: Global Protect user private IP shows 0.0.0.0

sahithyan.subbu — Wed, 01 Apr 2020 15:54:44 GMT

@kiwi

It happens for random users and if once user's private IP starts showing 0.0.0.0 in remote user section that stays forever. Even after multiple re-connections from client side it just wont change back to actual private IP.

About multiple gateways, yeah customer got 2 gateways but 2nd is non implemented in live yet so actual live in 1 gateway.

Irony is this doesn't impact the network in anyway because in user end agent getting actual private IP that is 172.16.100.234, and also in traffic log i can able to see that actual IP also i can see that actual IP in system logs. Only thing is in GP gateway remote users section, only there i am seeing this weird ip 0.0.0.0 instead of actual private IP.

Re: Global Protect user private IP shows 0.0.0.0

kiwi — Wed, 01 Apr 2020 20:05:38 GMT

Hi @sahithyan.subbu ,

That sounds like a bug :S

Luckily it seems to be a visual bug only and not impacting any performance.

I'd recommend to gather GP logs and Firewall logs and Tech support file to report it to Technical Support.

Cheers,

-Kiwi.

Re: Global Protect user private IP shows 0.0.0.0

hshawn — Wed, 01 Apr 2020 20:51:07 GMT

When we see this it is 100% of the time due to the user(s) not being in the AD group that is allowed to use the VPN. Once they are added to the proper group then they get a valid IP.

I did see this one other time after a PANOS upgrade everyone had 0.0.0.0 and that was a visual "glitch/bug" the user still had an IP address when checked on the CLI.

Re: Global Protect user private IP shows 0.0.0.0

sahithyan.subbu — Fri, 03 Apr 2020 14:30:05 GMT

@kiwi

Yeah man, I too think so 😕

Okay will create a ticket with PA TAC and will post the results here after i get a conclusion on this.

Thanks for your support man, Appreciate that.

Re: Global Protect user private IP shows 0.0.0.0

svelez — Mon, 12 Apr 2021 17:26:59 GMT

Hi Sahithyan,

Was this an issue with the rasmgr crashing due to SIGSEGV?

Bug ID PAN-125157

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-addressed-issues/pan-os-9-0-6-addressed-issues.html