MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

[ClintP]

Hi folks,

So i'm having pretty bad vpn problems while working from home. It's been happening for a while, but now that I'm working remotely every day, it's become unbearable. I hope someone can assist.

This is how it goes: I connect to my work vpn and after some time (maybe 10-15min, sometimes longer and sometimes shorter), requests to remote systems start timing out. If I disconnect the vpn and reconnect, things go back to working. This goes on throughout the day.

To troubleshoot, I've tried the following:

1. run a ping in a terminal window. Pings are usually 30-50ms but when things stop working, I see my pings have jumped to 60,000 - 100,000ms and higher
2. i have connected a Windows laptop to the same vpn gateway and kept it running for a day. The Windows vpn never missed a beat while the Mac vpn had issues throughout the day
3. reinstalled GlobalProtect client

I don't have problems with connectivity when browsing the Internet and not connected to the vpn.

Can anyone suggest how to solve this?

MacOS Catalina 10.15.3

GlobalProtect VPN client 5.0.8-4

Thanks,

Clint

[kiwi]

Hi @ClintP ,

Is your GP configured to perform a HIP check ?  

A HIP check happens periodically and ensures that remote hosts connecting to the company network are adequately maintained and adhere with the security standards before they are allowed access.  This periodical check could impact performance.

Have you checked the processes on your system at the time the issue occurs ? Maybe some process is hogging all the resources ?

Cheers,

-Kiwi.

[kiwi]

Is your GP configured to perform a HIP check ?  

A HIP check happens periodically and ensures that remote hosts connecting to the company network are adequately maintained and adhere with the security standards before they are allowed access.  This periodical check could impact performance.

Have you checked the processes on your system at the time the issue occurs ? Maybe some process is hogging all the resources ?

Cheers,

-Kiwi.

[ClintP]

Hi Kiwi,

Is there an easy way to tell if GP has triggered a HIP check? Maybe logs?

I have not noticed a process hog when experiencing the network issue. Other than network connection issues, the system is responding normally. Actually, just after typing this response, the issue occurred. I checked the Activity Monitor and sorted by "%CPU" descending. Guess what, PanGPS was at the top at 100%. When I disconnect/reconnect the vpn and pings return to normal levels, PanGPS is around 1 - 3%.

What now?

Thanks.

[kiwi]

Hi @ClintP ,

Yes, please check the client logs :

HOW TO COLLECT LOGS FROM GLOBALPROTECT CLIENTS 

My guess would be HIP checks are happening.

Your IT team can customize these checks but I won't recommend disabling them entirely.

See if they can finetune the settings so it doesn't use up all your device resources.  If that doesn't work I'd advise to reach out to PAN support to have this investigated more thoroughly.

Cheers !

-Kiwi.

[ClintP]

Had a call with GP support and they said my issue was likely related to a bug. No concerns about HIP.

5.0.9 has just been released that supposedly fixes my problems. Fingers crossed!