PA GP not allowing users to connect

[soporteseguridad]

Hi guys,

The other day suddenly none of customer users were able to connect to their VPN, upon further inspection we tried to access to the portal through web and instead of showing the login we were returned "502 Bad Gateway" error.

In order to solve the problem we just restarted the sslvpn process and afterwards the VPN started working fine. Do you have any idea of what might be the root cause of the issue?

Thanks in advance for your help!

[kiwi]

Hi @soporteseguridad ,

Might be a memory leak issue. 

Are there any crash files for support to analyse ?

Generate a TSF and check the resources used by the sslvpn process before you restarting it.  This should give you a good indication if the process was having issues.

To avoid memory leak issues try to run a recommended PAN-OS version if not already done.

Best,

-Kiwi.

[nikoolayy1]

Did you also have issues with the GUI on the firewall where the portal is hosted or the clientless VPN if it is on the same firewall? The portal, GUI, clientless VPN all use the firewall web server and this is why the issue could be with the webserver. Also check if the disk was not full as the reboot could have cleared some logs or a memory/cpu leakage issue.

You can take a look of the System logs in the GUI or the web server logs with the command "less webserver-log xxx" or 'less mp/cp webserver-log xxx" depending on the model and also the webserver access logs could have something interesting in them.

[nikoolayy1]

If you managed to get the needed answers, please flag the question as answered.