Is there any configuration pre-requisite to make the Global Protect APP (Client) using the "cached portal" information to built the Gateway tunnel is case of Portal failure or unavailable ? I tried with/without "Save User Credential"... with/without "Allow user to Sign Out..." ... etc.
I never been able to make it work ...!
Global Protect APP 5.1.0-75
I would personally switch to GP 5.0.8 and see if that addresses the issue. I've found a few issues with 5.1.0 and I wouldn't be entirely surprised if you aren't running into some sort of bug.
The only real prereq for the cached portal configuration to work properly, you really just need the credentials to be entered or saved. Once that's done and it attempts to reach out to the portal, it will use the cached portal configuration if it can't reach the portal.
I would reach out to TAC and open a case on it, just so that PAN actually knows that the bug exists within 5.1. I would continue to stay away from 5.1 for a bit yet though, it appears to need more than a handful of bug fixes.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!