PA GP not allowing users to connect

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

PA GP not allowing users to connect

L4 Transporter

Hi guys,

 

The other day suddenly none of customer users were able to connect to their VPN, upon further inspection we tried to access to the portal through web and instead of showing the login we were returned "502 Bad Gateway" error.

 

In order to solve the problem we just restarted the sslvpn process and afterwards the VPN started working fine. Do you have any idea of what might be the root cause of the issue?

 

Thanks in advance for your help!

3 REPLIES 3

Community Team Member

Hi @soporteseguridad ,

 

Might be a memory leak issue. 

Are there any crash files for support to analyse ?

Generate a TSF and check the resources used by the sslvpn process before you restarting it.  This should give you a good indication if the process was having issues.

 

To avoid memory leak issues try to run a recommended PAN-OS version if not already done.

 

Best,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

L6 Presenter

Did you also have issues with the GUI on the firewall where the portal is hosted or the clientless VPN if it is on the same firewall? The portal, GUI, clientless VPN all use the firewall web server and this is why the issue could be with the webserver. Also check if the disk was not full as the reboot could have cleared some logs or a memory/cpu leakage issue.

 

 

You can take a look of the System logs in the GUI or the web server logs with the command "less webserver-log xxx" or 'less mp/cp webserver-log xxx" depending on the model and also the webserver access logs could have something interesting in them.

L6 Presenter

If you managed to get the needed answers, please flag the question as answered.

  • 1569 Views
  • 3 replies
  • 0 Likes
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!