OS 8.0 and Global protect VPN

[jdprovine]

I thought I heard earlier this year that there could be issues with the global protect VPN that are caused by upgrading to OS 8,0

[reaper]

What did you hear exactly ? 🙂

[RyanGates]

This did happen to us. However, it corrected itself but it took a few hours. Certain users when they logged into Global Protect could not access certain Subnets in our Domain. I opened a ticket with support and they connected to check out the Global Protect logs. But when they connected it started working on its own.

[jdprovine]

@reaper

Details, details ;). First of all its good so far only one issue reported from Ryan I need to look back in my posts to get specifics but hold that thought

[jdprovine]

@RyanGates

Thats weird how long did it take to start working on its own and how long ago did you have the issues

[jdprovine]

@reaper

I found it in my notes, we are currently using xauth and I heard that there were issues with 8 and xauth

[BPry]

@jdprovine,

I believe this has been fully addressed at this point, although kind of just recently within the maintenance releases. 

PAN-82370 - 8.0.8

PAN-67950 - 8.0.4

Most were fixed after PAN-67950 was addressed, however certain Android devices require PAN-82370 to function correctly. 

[jdprovine]

@BPry

So there was only specifically an issue with mobile devices? I am currently on 7.1.15 to avoid the issue I would have to go to at least 8.0.4?

[BPry]

@jdprovine,

You should be mostly fine, however some Android devices wouldn't function properly. Not sure why you would stop at 8.0.4 however, install the latest recommened release when you actually go to upgrade. 

[jdprovine]

@BPry

We don't use the global protect for mobile devices, wasn't deemed a necessary expense. I will go as high as TAC recommends

[reaper]

@jdprovine right at this moment in time, 8.0.8 has a recommended status so if you plan to upgrade shortly I'd aim for that release.

If your upgrade is in a few days/weeks please check back as 8.0.9 is about (i'd guess) at the tipping point where we decide if it is recommended or not (in case something has popped up due to a fix that broke something else for example)

[jdprovine]

@reaper

Nope this summer was what I was targeting for if I can find the time