topic Clientless VPN and Java/Javascript in General Topics

Clientless VPN and Java/Javascript

PaulMoore — Fri, 17 Apr 2020 11:44:15 GMT

We have a clientless VPN and app set up to use https on tcp 8443 but the page is not displaying at all. Connectivity has been proven end to end so all the rules are in place.

The app points to a webserver that hosts a portal and uses Javascript.

Some debugging was carried out on the client browser side and a comparison of going through the clientless VPN and not going through the VPN showed the Palo inserting various code. I know the Palo does URL re-writes but can anyone explain what the "pan_eval((function()" and "?gp-7" is? I guess it's something to do with Java but unfortunately I have no experience of it.

Many thanks.

Paul.

These are some of the extracts from the debug whilst going through the VPN and the inserted elements:

pan_eval((function()

This whole content has been added by the Palo:

).toString().slice(12, -2),__pan_site_rules,1);</script>

This is where ?gp-7 added

<body>

<app-root></app-root>

Re: Clientless VPN and Java/Javascript

junrong — Mon, 08 Jun 2020 04:39:36 GMT

Hi all, I'm also facing the same issue. Seems like the javascript that global protect wraps stops it from loading. Has anyone found a solution to this?

Re: Clientless VPN and Java/Javascript

PaulMoore — Tue, 16 Jun 2020 10:45:54 GMT

Hi,

We finally got this working.

Under "Network\GlobalProtect\Clientless Apps" we had an application with the "Application Home URL" configured with an IP address rather than a URL with the server hostname. Once this was changed we could connect to the server OK.

Hope this helps.

Paul.

Re: Clientless VPN and Java/Javascript

TechnikSupport — Thu, 15 Sep 2022 12:37:22 GMT

hey,
that didn't work for us. All of our applications have an FQDN URL entered, but we're still having the issues described above. The only thing that helps us is if you outsource the Javascript files to an external server and exclude them from the clientlessvpn configuration. It looks like the reverse proxy is not properly ending the javascript files with a parenthesis. This is displayed to me in the web developer window of the google chrome browser.

best regards

Re: Clientless VPN and Java/Javascript

chansitw — Fri, 21 Oct 2022 19:48:25 GMT

Seem like I'm facing this issue too.
For my scenario, web page doesn't update after press confirm button on popup.
I try to debug, compare and found some strange in java script section, I need to consoult with TAC and web team.

Re: Clientless VPN and Java/Javascript

socempresas1 — Thu, 01 Dec 2022 16:36:42 GMT

In my case was the Hostname of the Clientless VPN Portal that was with an IP, we changed it to a valid hostname and got resolved even when the internal apps configured with an IP.

Re: Clientless VPN and Java/Javascript

TechnikSupport — Fri, 02 Dec 2022 07:47:01 GMT

You mean here right?:

That's already a DNS name and not an IP address, unfortunately that's not our problem, but thanks for the tip.