GP issue with phone and tablet after upgrade to 7.1

[TheRealDiz]

Hi All,

It seems we facing issue after upgraded to 7.1.0 with Smartphone and Tablet with GP client:

This VPN remote access works properly before upgrade.

Anyone has this issue?

Suggestions?

Best Regards

Luca

[TheRealDiz]

We are trying to establish VPN tunnel on settings with Ios.

Sorry I have attached wrong screenshot.

This below it's right screenshot:

-------------------------------------

In English says:

Connection VPN

Negotiation with VPN Server failed

[TheRealDiz]

Hi these are relevant log from PA:

-----------------------------------------

-------------------------------------------------

Best Regards

Luca

[jsotech]

We experienced this as well with Linux/mobile clients connecting via IPsec. PA recommended to roll back to our previously working PAN-OS version (7.0.5h-2 in our case), which did resolve our issue. We didn't get a report on what fix (if any) are currently in the works, so we're sticking with 7.0.x for now. 🙂

[TheRealDiz]

Hi @jsotech,

Thanks a lot for you response.

Yeap I have tested it on different enviroments and behavior is the same.

I wrote on community because, I just want to know if someone has found any workaround on this.. But I suppose this is simply a bug of 7.1 major release.

I will wait with you for 7.1.1 or a fix for that; at this moment I'm doing roll-back to the previous version.

Anyone facing this issue too?

Best Regards

Luca

[TheRealDiz]

Upgraded to 7.1.1 .. Same issue 😞

[Jacopo_Vigano]

Hi Luca,

with PAN 7.0.5-h2 it works fine. It seems the problem is related on PANOS 7.1.x

Thanks.

Jacopo

[MN · Accepted solution]

Hi Folks,

The issue was already investigated by the Engineering team and they found a problem in config migration to 7.1 release.

There is a workaround available:

From CLI configure:

# set global-protect global-protect-gateway <gateway name> client-auth auth-any os Any
# commit

Dev. created a fix which will be tested and included in one of the following maintenance releases.

Cheers,

Marian

[TheRealDiz]

Thanks Again @MN !!!!

:))