GlobalProtect 5.2.4 client connects but suddenly unable to ping anything

[solarstone]

Have confirmed that no changes have been made firewall-wise, nor GP agent. The client gets authenticated, assigned an IP from the pool, but is then unable to ping anything internally, and consequently can't resolved DNS.  The PA hosting Global Protect is a VM in Azure, as are the onward servers.

[kiwi]

Hi @solarstone ,

There isn't much info to work with. 

What connection method are you using with GP ? Do you have split-tunnel (is your traffic going into the tunnel or following a different route) ?

Do the logs or global counters provide additional information ?

Some general GP troubleshooting tips can be found here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkBCAS

Cheers,

-Kiwi.

[BPry]

@solarstone,

In addition to what @kiwi has already mentioned, you haven't stated if it happens to a single client or if you can reproduce the issue across all clients in your environment. That's a pretty important detail when working with what is potentially limited to a single agent installation on a sole client.

Also, just a friendly reminder that 5.2.4 as an agent is fairly behind the current release for the 5.2 agent. Might want to take a look at the release notes and think about activating a new agent bundle. 

[solarstone]

It is this problem basically - Solved: LIVEcommunity - I am having Pan-OS integarted user Id - LIVEcommunity - 439686 (paloaltonetw...