Clientless VPN Loading Issue

[Lakshitha]

Hi Friend,

I have configured clientless VPN and application render to outside through clientless VPN portal. All authentication fine and I can see application icon also. But when i press it application redirect and it may takes more than 2 min to load. After first load its loading quickly. Please any suggestions.

Thanks

Lakshitha

[kiwi]

Hi @Lakshitha ,

Could you provide some more data ?

What HW and SW are you running ?

Is the device under heavy load ?

Did you check for any drop counters while the problem is occuring ?

Cheers !

-Kiwi.

[Lakshitha]

Could you provide some more data ?

What HW and SW are you running ?

Is the device under heavy load ?

Did you check for any drop counters while the problem is occuring ?

Cheers !

-Kiwi.

Yes sure.

We are running 3020 HA

PAN OS is 9.0.4 with clientless VPN Configuration

Actually not. This is our DR site firewall so load is pretty low.

I have done packet capture. I cant see any packet drops.

Thanks,

Lakshitha

[Lakshitha]

Could you provide some more data ?

What HW and SW are you running ?

Is the device under heavy load ?

Did you check for any drop counters while the problem is occuring ?

Cheers !

-Kiwi.

Yes sure.

We are running 3020 HA

PAN OS is 9.0.4 with clientless VPN Configuration

Actually not. This is our DR site firewall so load is pretty low.

I have done packet capture. I cant see any packet drops.

Thanks,

Lakshitha

[BPry]

@Lakshitha,

That sounds like the application may be caching things client side, so subsequent loads are faster because less data needs to be transferred. I would play around with clearing out the browsers cache and seeing if that makes your initial and subsequent load times balance out. If clearing the cache causes the load times to equalize, there likely isn't going to be much that you can do to fix the applications initial load-time. 

[Lakshitha]

@BPry 

Thanks for the reply. I opened a TAC case few days ago. Still they are working on it. Actually TAC has escalated it to the PALO Engineering team. 

They have mentioned some suggestions in today update. We are running with 9.0.4. They have replay packet capture on 9.0.4 and 9.0.6.

They have suggested to upgrade to 9.0.6. 

As a next action, engineering Team has Suggested to upgrade the PAN OS to 9.0.6 to avoid issue reported in PAN-121481, as the issue reported in PAN-121481 could cause lot of Clientless vpn issues.

Thanks,

Lakshitha

[Lakshitha]

Hi,

After upgrading OS partially page loading issue was sorted. But after application login I cant access page content properly. This problem more that 2 weeks with palo alto TAC.

🙂