MAC0s 15.3 is showing an error the network connection is unreachable or the gateway is unresponsive.

[F.Pinar]

Hi I would like to ask if there any bug reported for MACOS15.3 PA-450 Global protect 6.2.0-89 reason being is that I got a situation in which the customer is getting the following error :

the network connection is unreachable or the gateway is unresponsive 

On the other hand , I found out a bug in which is the same behavior , but different version. PAN-194262

Can you please let me know if a bug was reported for 11.0.1 version for APPLE devices ?

Any kind of help would be highly cherished.

[F.Pinar]

these are my findings and articles check:

PAN-194262
Fixed an issue where the GlobalProtect application failed to connect when a user or group was configured under the portal Config Selection Criteria

P30557-T21267 01/29/2025 13:31:13:943 Error( 568): Connection error Error Domain=NSURLErrorDomain Code=-999 "cancelled" UserInfo={NSErrorFailingURLStringKey=https://200.37.216.82:443/ssl-vpn/prelogin.esp?kerberos-support=yes&, NSLocalizedDescription=cancelled, NSErrorFailingURLKey=https://200.37.216.82:443/ssl-vpn/prelogin.esp?kerberos-support=yes&}
response:(null)
connection: 0x600002c44460, type: 2, host: [200.37.216.82:443], original host: [200.37.216.82], alwaysTrust: 0
P30557-T21267 01/29/2025 13:31:13:943 Debug( 518): error detail is Server cert verification failedP30557-T21267 01/29/2025 13:31:13:943 Error(6613): NetworkDiscoverThread: failed to discover external network.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClH2CAK

P30557-T21023 01/29/2025 13:31:41:873 Error(6613): NetworkDiscoverThread: failed to discover external network.P30557-T13827 01/29/2025 13:31:11:185 Debug(2576): Unserialized empty cookie for portal 200.37.216.82 and pre-logon user.

Moverover, I erased the previous certificates and created them from Cero getting the same result including SSL/TLS profile as recommende , but got the same result.

[LeiYan]

Hi @F.Pinar 

Would you please share if you've found the root cause and how it was fixed?

Recently we are experiencing exact the same issue with your description, as well as the BUG KB you've provided.

We've raised a case to TAC engineer but they insist this is a local MacOS local network stack issue, since we have below logs in PanGPS

Connection error Error Domain=NSURLErrorDomain Code=-999

From our observation the issue happens only for MacOS when connecting to our Prisma Access portal running in 10.2.4, when we use our on-prem portal 11.1.6-h3 then no issue.

Thank you for the BUG ID and KB provided, I'll relay them to the TAC engineer to check further.

BR