Global Protect - Using Cached Portal

[DLONGPRÉ]

Hi guys,

Is there any configuration pre-requisite to make the Global Protect APP (Client) using the "cached portal" information to built the Gateway tunnel is case of Portal failure or unavailable ?  I tried with/without "Save User Credential"... with/without "Allow user to Sign Out..." ... etc.  

I never been able to make it work ...! 

Global Protect APP 5.1.0-75

PAN-OS 9.0.4

Thanks,

D. 

[BPry]

@DLONGPRÉ,

I would personally switch to GP 5.0.8 and see if that addresses the issue. I've found a few issues with 5.1.0 and I wouldn't be entirely surprised if you aren't running into some sort of bug. 

The only real prereq for the cached portal configuration to work properly, you really just need the credentials to be entered or saved. Once that's done and it attempts to reach out to the portal, it will use the cached portal configuration if it can't reach the portal. 

[DLONGPRÉ]

@BPry 

It seem to work great with 5.0.8-4. So, it's look like a bug. 

[BPry]

@DLONGPRÉ,

I would reach out to TAC and open a case on it, just so that PAN actually knows that the bug exists within 5.1. I would continue to stay away from 5.1 for a bit yet though, it appears to need more than a handful of bug fixes. 

[DLONGPRÉ]

@BPry 

Great!

5.1.1 has just been released. Wondering if that fixe it. I will give a try.