GlobalProtect software is not downloading from the gateway portal

[TranceforLife]

Hello Guys,

GlobalProtect software is not downloading from the gateway portal even though it is already activated.

Clients get stuck on “<panos version>.msi starting”

Any thoughts?

Thank you,

Myky

[reaper]

did you check the threat log in case the msi is being blocked by a file blocking profile ?

[TranceforLife]

Hello Reaper,

Yes have checked. Nothing there. One of our PS engineers  currently checking this and it seems like NAT issue. We need to create a bi-directional rule and test it again. Will update this post later.

Thanks,

Myky

[TranceforLife]

Hello,

Changing NAT to the bi-directional didn't fix the problem. Has anyone had this issue before? So the client is authenticated as it should, then portal is presented options to download 32, 64 and Mac version of GP. You then "clicking" on the version you need, it shows up in the browser as "download started" and get sucked on 0 kb.

Thx,

Myky

[reaper]

just a couple more things you could try: re-activate the GP client

> request global-protect-client software activate version <version>

or a commit force and finally a DP restart

[TranceforLife]

Thanks . I will try to reinstall it but initially, it stopped working on 2.3.2 version. So we installed 3.0.0 after still the same. 

Do you know if there is a way to see if GP agent actually pushed to the client? maybe some CLI command or session kb check.

[TranceforLife]

ok so once l am authenticated and connected to the GP portal l am creating two separate sessions, once clicked to download a file ssl and web-browsing both on port 443 (for the file downloads or GP msi agent). Below screenshot from my lab where GP works fine: