Never ending globalprotect VPN drops

Reply
Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

@reaper

Indeed! TAC is starting to go downhill

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

@reaper @BPry @OtakarKlier

 

Will you get everything if you set it to dump instead of debug?

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

@reaper @BPry @OtakarKlier

 

Collected the client off the logs and what do you know when the user came down everything worked as it should and I have convinced to contact there ISP and check out their home wireless 

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

As with you all, I am experiencing user complaints about VPN connectivity and reliabilty.

 

One thing I have found today with one of the GP users is using what I'll call ISP C. Our company has two ISP's I'll call them ISP A and ISP B. A traceroute from either side shows traffic going to the client traversing over ISP A from the GP Gateway to reach ISP C. However, a traceroute from ISP C reveals it is traversing a path over ISP B to reach the VPN Gateway. I'm not sure if that has something to do with it or not just yet. It has been at least for this user, a problem more recently with things starting in September.

 

To add to it, I had a conversation with another engineer in the area at a reseller. He mentioned that he is having an issue at a client site with VPN users dropping randomly as well. They are using Cisco AnyConnect but the interresting thing is they share the same ISP C that our client is using. Not only that, but it is something that started occuring in the same timeframe as our client. These clients should have only one AS hop between their AS and our AS. I haven't confirmed the other path.

 

So, don't discount the idea that problems could just be ISP related. If anyone has any comments on asynchronous ISP paths using BGP please reply. I'd enjoy hearing them.

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

@bspilde

Absolutely, I find that 9.5 times out of 10 the issue is related to a wonky ISP connection, but its hard to get the user to believe that. They repeatedly come back to be,even when I have logs saying its not the VPN client, to get me to fix it for them. Frequently I advise them to contact their ISP, some do some don't, those who have contacted the ISP got resolution those who didn't got noe resolution. :)

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

In my most recent case, the user finally contacted the ISP.

 

Their VPN client was dropping every hour. ISP had them reboot their cable modem/router combo and it has been fine ever since.

Highlighted
L4 Transporter

Re: Never ending globalprotect VPN drops

@bspilde

Yup like I said 9.5 times out of 10 its wonky ISP connection - good luck ;)

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!