topic Re: Cannot connect to Globalprotect in General Topics

Cannot connect to Globalprotect

FarzanaMustafa — Fri, 20 Mar 2020 14:23:33 GMT

Since updating Global Protect client, I can no longer connect to VPN. I can successfully connect to all our other sites.

I’ve tried connecting on the OSX client & Windows Client.

System logs suggest login succeeded.

See screenshot attached of failure notice.

GlobalProtect Logs show below.

Nov 03 19:45:45:53609 Debug( 308): SSL connect failed
Nov 03 19:45:45:53861 Debug( 59): detailed SSL error info:
Nov 03 19:45:45:53883 Debug( 781): connect() failed
Nov 03 19:45:45:53976 Info (4197): ConnectSSL: Failed to connect to '18.20.13.x:443'
Nov 03 19:45:45:54010 Debug(5101): Show Gateway VPN Access Gateway 1: Could not connect to the GlobalProtect gateway. Please contact your IT administrator.
Nov 03 19:45:45:54069 Info (4233): ConnectSSL(FALSE) failed
Nov 03 19:45:45:54080 Info (4652): SendNReceive() failed.

Nov 03 22:48:55:539688 Error(4718): NetworkDiscoverThread: failed to discover external network.
Nov 03 22:48:55:539694 Debug(4730): Network discovery failed, set error as Could not connect to the GlobalProtect gateway. Please contact your IT administrator.
Nov 03 22:48:55:539699 Debug(5720): --Set state to Disconnected

I’ve refreshed the connection & manually added the portal back in to the client. Still doesn’t connect.

Also tried to reinstall GP.

Software Version - 8.1.11

GlobalProtect Agent - 5.0.5

Re: Cannot connect to Globalprotect

Remo — Mon, 04 Nov 2019 12:25:00 GMT

Hi @FarzanaMustafa

What version od PAN-OS is installed on the other (working) gateways? Did I understand correctly that you have connection problems on both windows and mac?

The logs below could also show general connection problems as not even network discovery seems to be working. Did you try to connect from another (source)network?

Re: Cannot connect to Globalprotect

FarzanaMustafa — Tue, 05 Nov 2019 21:19:28 GMT

Hi @Remo

>What version of PAN-OS is installed on the other (working) gateways?

5.0.5

>Did I understand correctly that you have connection problems on both windows and mac?

Yes

>Did you try to connect from another (source)network?

Yes

We downgraded to 4.1.8-2 to make it work.

Re: Cannot connect to Globalprotect

FBRODIN — Wed, 20 Nov 2019 21:13:05 GMT

Hello

We've exactly the same problem with after an upgrade of the GlobalProtect Agent for Windows to version 4.1.13 and 5.0.5.

All works fine with the 4.1.12 version. Our gateways are in PanOS 8.1.10. At this time we've downgraded Global Protect Agent to 4.1.12.

Florent

Re: Cannot connect to Globalprotect

mmeehan — Thu, 21 Nov 2019 16:19:21 GMT

We had the same issue, when we upgraded to the 5.0.x client, had to rollback to 4.1.11. It did not impact all of our users but it was mostly Windows 10.

Re: Cannot connect to Globalprotect

jdelio — Wed, 10 Feb 2021 21:20:10 GMT

Just wanted to let everyone know that if they are having any GlobalProtect issues, and need to troubleshoot the issue, our Very own @kiwi has written a great blog all about troubleshooting GlobalProtect.

Be sure to check it out here:
https://live.paloaltonetworks.com/t5/blogs/dotw-globalprotect-troubleshooting-tips/ba-p/383911

Re: Cannot connect to Globalprotect

AnalysisMan — Thu, 02 Dec 2021 18:19:50 GMT

Hi @FarzanaMustafa,

We had many cases with this problem. This error is usually seen when the GlobalProtect client is upgraded, but GP is not installed correctly. And the general uninstalling/reinstalling doesn't help in this case.

This KB should fix the issue.

Error: Failed to find PANGP virtual adapter interface when connecting to GlobalProtect

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5eCAC&lang=en_US

Hope this helps!