Active Directory Users & Computers slow over GlobalProtect

[ShippG]

We are experience an issue that I am curious if anyone else has encountered. When any of us IT folk are VPN'd in via GlobalProtect (tested on different internet connections, hardwired and wifi) whenever we open up MSFT Management Console Active Directories Users & Computers, it takes about 5-7 minutes to open.  I can see the traffic in our traffic logs on the Palo, nothing denied, it just takes a long time until it opens and runs painfully slow once opened. 

If anyone has encountered this before if you could point me in the right direction that would be great, I will update if I do find anything.

Thanks,

[dpeterson4]

Hello,

We ran into this same issue.  We had to add a special registry key.  Problem is cause by weakhostsend in windows or some cases it was a DNS issue.

We had to add the following registry key.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings\post-vpn-connect

Name: command

Data: powershell -Command "Get-WmiObject win32_networkadapter | where-object NetConnectionStatus -eq 2 | where-object ServiceName -ne PanGpd | ForEach {netsh interface ipv4 set interface $_.InterfaceIndex weakhostsend=disabled}"

[ShippG]

Hmm I don't seem to have a key for post-vpn-connect under settings just "remove-gpa-cp"

[ShippG]

Nevermind I figured out how to add this (sorry I'm a network guy my brain is wired differently). Thanks for the input but this did not seem to resolve my issue - back to digging!

[cezarb]

Any new leads on this? I think we might have hit the same issues (probably related to DNS) and the register change did not help either.