topic GP 5.2.5 Error authentication check failed in General Topics

GP 5.2.5 Error authentication check failed

PaloAlto18 — Wed, 21 Apr 2021 03:34:55 GMT

Hi Team,

We have GP 5.2.5 on PAN OS 9.1.7

Connection method is pre logon then on demand.

on GP Gui logs i see error Error authentication check failed for ( eventid eq gateway-hip-check )

Even though we do not have hip check enabled on the GP.

Is this error by design?

how can i get rid of this error from gui logs?

any config i need to modify?

Re: GP 5.2.5 Error authentication check failed

reaper — Thu, 22 Apr 2021 07:38:08 GMT

do you have a GP license installed on your gateway? maybe check if the 'collect hip data' is set in portal > agent > HIP Data Collection

Re: GP 5.2.5 Error authentication check failed

RobbieJohnson — Tue, 18 May 2021 21:43:59 GMT

Did you ever figure this out? Having same issue and it's not a license issue.

Re: GP 5.2.5 Error authentication check failed

Jimmy_Shaw — Fri, 03 Sep 2021 12:23:19 GMT

Same problem. Any solutions?

Re: GP 5.2.5 Error authentication check failed

fsacristan — Wed, 22 Sep 2021 08:11:16 GMT

Same issue. Any ideas?

Re: GP 5.2.5 Error authentication check failed

asangra — Wed, 22 Sep 2021 10:07:48 GMT

My thought,

Even if you don't have HIP enabled, gp client always send "hipreportcheck.esp" to gateway every 3600s to check if gateway require HIP and if yes then hip report heads to the gateway. If HIP check not in use then HIP not require from client.

Since "hipreportcheck.esp" is a POST request to server which use a auth-cookie use for HTTP connection to the gateway and may be that auth-cookie is rejected by gateway with error.

For further investigating it you can put PANGPS logs in dump mode and look for hipreportcheck.esp response in PANGPS.log