Issue with GP Access for JIO Users on PA-820

[ChandrashekharD]

Dear Friends,

One of our customer is facing an issue with users on PA-820. According to the customer, many users are connecting to the internet via mobile hotspot using JIO SIM cards. While they can successfully connect to GlobalProtect, but they are unable to access internal servers.
This issue is specific to users who are using JIO SIM cards for internet connectivity via mobile hotspot on their laptops.

Regards,

Chandrashekhar

[JayGolf]

Hi @ChandrashekharD ,

If they can connect to GP, can you confirm they are assigned with the appropriate GP subnets you've assigned? When viewing traffic, what do the logs show? Are you not seeing traffic at all? 

[ChandrashekharD]

Hi JayGolf,

Thanks for your response,

We have analyse global counter logs and can see multiple packets being dropped due to an

exceeded Maximum Transmission Unit (MTU) but the DF (Don't Fragment) bit is present in a Palo Alto firewall, 

forward   Packets lengths exceeded MTU,

Packets dropped: flow stage receive error, 

Packets dropped: 802.1q tag not configured,

Packets dropped: invalid interface,

Packets dropped: Unsuprressed ICMP Need Fragmentation,

session setup: no destination zone from forwarding

Such logs I can see in global counters, please not that this is happening with the JIO sim cards only

Kindly suggest me what next step should I take now to mitigate the issue 

Regards,

Chandrashekhar