GlobalProtect - RPC connections fail

[bcsgroup]

Hi All,

I seem to be unable to get this to work but when connected via GlobalProtect VPN remotely all RPC server communication fails. This can be seen with any of the following tasks:

Open Active Directory Users and Computers

Open Group Policy Management

Attempt to connect to a DFS file share

attempt to update group policy with GPUpdate command line options

Attempt to open the security tab in the properties of a folder on a shared network location

Any attempt to do name look-ups to Active Directory.

I have a support case open but was wondering if anyone else can confirm this as well? I have tried all versions of GPAgent from 1.2.7 through 2.0.3

[pulukas]

With the type of services you list, I wonder if you are getting good internal DNS resolution after the Global Connect is started.

[bcsgroup]

Hi, Yes DNS works fine and that had been my thoughts so I was playing with the DNS search list to no avail. I then found that in the months leading up to the problem this traffic was being logged in the threat log as informational (MS RPC is listed as a threat) but working with PA support we have found that a couple of weeks ago it changed from logging to dropping packets so they are looking into why this is now.

[pulukas]

Interesting issue.  So did you end up with a custom profile to ignore this particular threat signature for the traffic until the signature is fixed?

[bcsgroup]

Unfortunately not as even removing all threat scanning and other profiles the traffic is still dropped. Sometimes it goes through and everything works just long enough for you to get your hopes up and think you fixed it then it stops again.