fixing GP bug in newest 10.1.x versions

[Jacek_Loszewski]

Hi, PA users

Do you have any rumors about fixing this bug in the latest versions of 10.1.x. firmware?

Note: GlobalProtect tunnel might disconnect shortly after being established when SSL is used as a transport protocol. Workaround: Disable Internet Protocol Version 6 (TCP/IPv6) on the PANGP Virtual Network Adapter.

I have several hundred stations with GP and this error is very disturbing. And April is approaching...

[kiwi · Accepted solution]

Hi @Jacek_Loszewski ,

Looks like it might get fixed in 10.1.12-h1
That said, PAN-242561 is already fixed in 10.2.8 if it's an option for you.

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-8-known-and-addressed...

Kind regards,

-Kim.

[Jacek_Loszewski]

Thank you, @kiwi 

Yes, 10.2.8 is my option and I will probably install this version.
I was planning to skip the 10.2 family but I guess it's not possible 🙂

[Jacek_Loszewski]

I found this topic https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-client-disconnect-issu...

and this answer:

+Fix Schedule:

...target release for fix (current latest release FYI)
...11.2.0 (not released yet)
...11.1.2 <** updated on 27th/Feb/2024 **>
...11.0.5 (11.0.3-h3)
...10.2.8 (10.2.7-h3)
...10.1.14 (10.1.12)