GlobalProtect has DNS issues after waking from sleep mode

[jrauman]

GlobalProtect on Windows.  User locks computer and computer goes to sleep. They return and unlock.   If GlobalProtect has disconnected while in sleep mode, they user reconnects succsfully.  User's drive mapping fail and apps fail.  Pings name of server and that fails.  PIngs IP address of server succeeds.  Restarts PC and everything is fine again.

Whats going on?

[DL_CyberCX]

Over 10 laptops woken up from sleep/hibernate mode & GP client showing a login error page attached screenshoot.

Any solution or root causes?

PanGPS log when issue happens.

=========================================

(P6068-T6072)Debug(17703): 06/24/24 12:20:15:508 Modern standby
(P6068-T6072)Info ( 397): 06/24/24 13:11:35:229 Received powersetting change event
(P6068-T6072)Debug(17712): 06/24/24 13:11:35:229 Wakeup from modern standby
(P6068-T6072)Info ( 428): 06/24/24 13:11:36:989 Received power event, type 0x0000000a
(P6068-T6072)Info ( 428): 06/24/24 13:11:42:068 Received power event, type 0x0000000a
(P6068-T6072)Debug( 348): 06/24/24 13:11:43:703 Received session change, event type 8, session 1
(P6068-T3484)Info ( 531): 06/24/24 13:12:13:592 msgtype = gateway-credential-cancel
(P6068-T3484)Debug(4656): 06/24/24 13:12:13:592 ServerThread: ProcessServerCancelGatewayLogin
(P6068-T3484)Debug(4672): 06/24/24 13:12:13:592 Set cancel gateway login event.
(P6068-T2996)Debug(13212): 06/24/24 13:12:13:592 Got cancel gateway login event while waiting for challenge event for gateway globalprotect.my************.com
(P6068-T2996)Debug(13230): 06/24/24 13:12:13:592 HandleGatewayChallenge returns 1
(P6068-T2996)Debug(3929): 06/24/24 13:12:13:592 HandleGatewayChallenge returns TRUE. Gateway saml login issue
(P6068-T2996)Debug(3940): 06/24/24 13:12:13:592 User canceled login to gateway globalprotect.my************.com.
(P6068-T2996)Debug(15044): 06/24/24 13:12:13:592 Enforcer is not enabled
(P6068-T2996)Debug(1986): 06/24/24 13:12:13:915 Enforcer,found 0 filter object belonging to us.
(P6068-T2996)Debug( 41): 06/24/24 13:12:13:915 Roaming profile is false
(P6068-T2996)Debug( 169): 06/24/24 13:12:13:922 profileInfo username Clastname, profile path (null), server (null)
(P6068-T2996)Debug(4178): 06/24/24 13:12:13:938 CPanMSServiceWin::IsGpDisabledForCurUser() - bGpIsDisabled=0.
(P6068-T2996)Info (2701): 06/24/24 13:12:13:938 Failed to retrieve info for gateway globalprotect.my************.com.
(P6068-T2996)Debug(2712): 06/24/24 13:12:13:938 tunnel to globalprotect.my************.com is not created.
(P6068-T2996)Error(6914): 06/24/24 13:12:13:938 NetworkDiscoverThread: failed to discover external network.
(P6068-T2996)Debug(6938): 06/24/24 13:12:13:938 Network discovery failed, set error as The network connection is unreachable or the gateway is unresponsive. Check the network connection and reconnect.
(P6068-T2996)Debug(7993): 06/24/24 13:12:13:938 --Set state to Disconnected
(P6068-T1060)Debug(2635): 06/24/24 13:12:13:938 Setting debug level to 5
(P6068-T2996)Debug(6978): 06/24/24 13:12:13:938 NetworkDiscoverThread: PortalStatus is 1, HasLoggedOnGateway is 0
(P6068-T2996)Debug(7001): 06/24/24 13:12:13:938 Network discovery is not ready, set GP VPN status as disconnected
(P6068-T2996)Debug(13525): 06/24/24 13:12:13:938 SetVpnStatus called with new status=0, Previous Status=0
(P6068-T2996)Debug(4513): 06/24/24 13:12:13:938 UpdatePrelogonStateForSSO() - tunnel state = Disconnected
(P6068-T2996)Debug(11265): 06/24/24 13:12:13:938 CPanMSService::OnVpnStatusProxyAgent: tunnel only, stop the proxy.
(P6068-T2996)Debug(7089): 06/24/24 13:12:18:946 NetworkDiscoverThread: Network discover is not successful. Retry.
(P6068-T2996)Debug(7103): 06/24/24 13:12:18:946 Retry network discovery for non-OnDemand mode.
(P6068-T2996)Debug(6452): 06/24/24 13:12:18:946 NetworkDiscoverThread: wait for network discover event.
(P6068-T2996)Debug( 596): 06/24/24 13:12:18:946 Set hip report quit event
(P6068-T2996)Debug(6468): 06/24/24 13:12:18:946 NetworkDiscoverThread: got network discover event.
(P6068-T2996)Debug(6475): 06/24/24 13:12:18:946 ----Network Discover starts----
(P6068-T2996)Debug( 752): 06/24/24 13:12:18:946 SetNextScheduledHipCheckTime to 0
(P6068-T2996)Debug( 774): 06/24/24 13:12:18:946 m_bScheduleFlag is set to 0
(P6068-T2996)Debug(6495): 06/24/24 13:12:18:946 UpdatePrelogonStateForSSO to GP_VPN_STATUS_DISCONNECTED
(P6068-T2996)Debug(4513): 06/24/24 13:12:18:946 UpdatePrelogonStateForSSO() - tunnel state = Disconnected
(P6068-T2996)Debug( 571): 06/24/24 13:12:18:993 Network is reachable
(P6068-T2996)Debug(2124): 06/24/24 13:12:18:993 bNetworkAvailable is 1
(P6068-T2996)Debug(2132): 06/24/24 13:12:18:993 Network is available
(P6068-T2996)Debug(6525): 06/24/24 13:12:18:993 finish check host reachable
(P6068-T2996)Debug(7993): 06/24/24 13:12:18:993 --Set state to Discovering network...
(P6068-T10592)Debug(6231): 06/24/24 13:12:18:993 CaptivePortalDetectionThread: IsDetectingCaptivePortal=1, PreLoginIsDone=0
(P6068-T10592)Debug(6208): 06/24/24 13:12:18:993 CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event.
(P6068-T2996)Debug(6563): 06/24/24 13:12:18:993 Logout gateways before network discover..., bJustResumed=0
(P6068-T2996)Debug(1414): 06/24/24 13:12:18:993 Logging out gateway, reason is Network discover
(P6068-T2996)Debug(1453): 06/24/24 13:12:18:993 Logging out gateway over
(P6068-T2996)Debug( 338): 06/24/24 13:12:18:993 Parse gateway list for user firstname.lastname%40************.com
(P6068-T2996)Debug(15389): 06/24/24 13:12:18:993 RetrieveClientIpByRemoteHost() - invalid remote host: .
(P6068-T2996)Debug( 204): 06/24/24 13:12:18:993 SelectInternalGateways - failed to retrieve client source ipv6!
(P6068-T2996)Debug(5680): 06/24/24 13:12:18:993 getaddrinfo host.GetString() globalprotect.my************.com
(P6068-T2996)Debug(5804): 06/24/24 13:12:19:026 Gateway globalprotect.my************.com(Stanwell VPN): ipv4 *.*.*.* , ipv6 , FQDN yes
(P6068-T2996)Debug(6586): 06/24/24 13:12:19:026 Set network discover in progress
(P6068-T2996)Debug(4513): 06/24/24 13:12:19:026 UpdatePrelogonStateForSSO() - tunnel state = Connecting
(P6068-T2996)Debug(15595): 06/24/24 13:12:19:026 GetNetworkTypeDS
(P6068-T2996)Debug(15598): 06/24/24 13:12:19:026 No ipv6 internal host detection.
(P6068-T2996)Debug(2016): 06/24/24 13:12:19:026 IP *.*.*.*
(P6068-T2996)Debug(2035): 06/24/24 13:12:19:026 host dc2dc01.************.com
(P6068-T2996)Debug(2052): 06/24/24 13:12:19:040 DnsQuery returns 9003
(P6068-T2996)Debug(2067): 06/24/24 13:12:19:040 Resolved *.*.*.*.in-addr.arpa for internal host detection with return value 9003
(P6068-T2996)Debug(6656): 06/24/24 13:12:19:040 NetworkDiscoverThread: network type is external.
(P6068-T2996)Debug(6797): 06/24/24 13:12:19:040 NetworkDiscoverThread: Discover external network.
(P6068-T2996)Debug( 552): 06/24/24 13:12:19:040 Discover external gateway: gateway count is 1, cutoff time is 5, bJustResumed=0
(P6068-T2996)Debug( 572): 06/24/24 13:12:19:040 One external gateway globalprotect.my************.com, priority=1, manual is 0
(P6068-T2996)Debug(3106): 06/24/24 13:12:19:040 Gateway: globalprotect.my************.com, client IP: 10.1.0.108
(P6068-T2996)Debug(2645): 06/24/24 13:12:19:056 retrieve info of gateway globalprotect.my************.com
(P6068-T2996)Debug(2410): 06/24/24 13:12:19:056 pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.2.2-259 (Microsoft Windows 11 Pro , 64-bit).
(P6068-T2996)Debug(2468): 06/24/24 13:12:19:056 open http session. agent is PAN GlobalProtect/6.2.2-259 (Microsoft Windows 11 Pro , 64-bit)
(P6068-T2996)Debug(2410): 06/24/24 13:12:19:056 pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.2.2-259 (Microsoft Windows 11 Pro , 64-bit).
(P6068-T2996)Debug( 476): 06/24/24 13:12:19:056 winhttp SetSecureProtocol, hSession=6a204e70, bAllProtocol=0, gbFips=0
(P6068-T2996)Debug(2656): 06/24/24 13:12:19:056 Skip setting proxy for creating tunnel to gateway globalprotect.my************.com
(P6068-T2996)Debug(3599): 06/24/24 13:12:19:056 m_msp->IsInPreserveTunnel() 0, m_msp->IsPrelogonRenameAuthFail() 0
(P6068-T2996)Debug(16119): 06/24/24 13:12:19:056 Set m_bPrelogonRenameAuthFail to 0
(P6068-T2996)Debug(3629): 06/24/24 13:12:19:056 CPanGateway::RetrieveGatewayInfo portal default-browser value is 0, support yes
(P6068-T2996)Debug(3644): 06/24/24 13:12:19:056 ----Gateway Pre-login starts----