connectivity problem with GP

[Radmin_85]

Users complain Global Protect vpn client performance problem. There is shown ping time more than 1000ms after I disconnect then reconnect there is shown less than 150ms.  Below photo after and before connection via GP

[BPry]

@Radmin_85,

Do you know how long the user had actually been connected to GP, and whether or not it was utilizing SSL or IPSec at the time? 

[Radmin_85]

IT haapens not in all users (all users are about 350).It happens in 5-10 users.I want to mention that the whole system is in Azure.and all users connect through GP.

And another point is when you reconnect GP it works normal.Is it any issy with ipsec or ssl?i dont have exact info about it

[BPry]

@Radmin_85,

I would start by taking note of how long GP has been up when you have to reconnect the user; I've seen issues in the past with users leaving GP connected where it would slow down until a reconnect if you allowed a long idle or inactivity timeout configuration. 

My guess would be that you find these users have an abnormally long connection time; which is why the reconnect addresses the issue and why you have very few users experiancing the issue. 

[Radmin_85]

you mean long idle time? where one can configure it in the system?

[BPry]

@Radmin_85,

Under Network > GlobalProtect > Gateways > $Gateway > Agent > Timeout Settings

This will have Login Lifetime, Inactivity Logout, and Disconnect on Idle settings.