GlobalProtect portal corrupt.

[saint-paul]

Running an 2050 Active Passive HA pair.

Yesterday I noticed that I couldn't login with the Globalprotect client. After some investigation I noticed that I could log in on the Globalprotect Portal web page, but after the login the page which offers the client downloads would not show up and the connection was reset after a timeout of ~30 seconds.

I suspended the active node, when the other node was active I could access the portal page and the client login was also working again. I rebooted the box with the portal page problem, but the login still doesn't work when I make this node active again.

Is there a way to reset the Globalprotect page one this device.

I'm running Panos 4.1.6, should I try "reinstall" in the software page?

Thanks

[UhMayYeah]

If you are sure that the config has not changed.Try restarting the process slvpn-web-server process which serves web-pages for GP.

CLI command:

> debug software restart sslvpn-web-server

-Ameya

[saint-paul · Accepted solution]

Thanks for your answer, but this doesn't change anything.

Edit:

Ok ,I think I narrowed the problem down to a DNS problem, I changed dns and service route for the dns, now that I rolled back this changes I have it back working.

Somehow the LDAP query to our AD for the users seems to get broken by this change, not sure why though. The changes seemed correct to me.

Edit2:

Found it, because I changed the service route, security policy rules where wrong/missing for accessing the LDAP.