Active Directory Users & Computers slow over GlobalProtect

[ShippG]

We are experience an issue that I am curious if anyone else has encountered. When any of us IT folk are VPN'd in via GlobalProtect (tested on different internet connections, hardwired and wifi) whenever we open up MSFT Management Console Active Directories Users & Computers, it takes about 5-7 minutes to open.  I can see the traffic in our traffic logs on the Palo, nothing denied, it just takes a long time until it opens and runs painfully slow once opened. 

If anyone has encountered this before if you could point me in the right direction that would be great, I will update if I do find anything.

Thanks,

[NathanielM]

Disable IPv6 to fix this on the WiFi adapter to fix this.

Such as:

https://answers.uillinois.edu/uis/page.php?id=99981

I can't take credit for this fix. Found it on redit

https://www.reddit.com/r/paloaltonetworks/comments/qq8iim/active_directory_management_tools_are_very...

[fhu_omi]

Hi,

With GP 5.2 and higher you should not have anymore Problems, see: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UNoCAM

[NathanielM]

My company is on GP 5.2 and still had AD slowness until disabling IPv6 on the Wifi adapter.

[fhu_omi]

Hi @NathanielM ,

as in the other articel is writen, it depends on the DNS Split Tunnel Feature setting. It is not written how it depends, but if you read this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBJ5CAO&lang=en_US%E2%80%A... maybe you find the right Split Tunnel Option. I can not test, but i have a customer with the same problem. I have to test this also with that customer, if he has time.

[Daniel_Li]

Hello Scott

As we has simlar issue on W10 with GP 5.1 or 5.2 for some users. I read this email about "Dug into our DNS..."  Is this setting on Corp DNS server ? or on Firewall. As IP scope is assigned by PANFW.  I guess it should be some setting on FW ? Please share your fixed setting if you can.

Thank you

Daniel