Problems with installing SSL-VPN Client

[lindorff]

Hi

Has anyone else had any problems with Installing PanInstaller on Windows 7?

I have managed to install it on some machines but sometimes the installation just drops and in the event viewer I get:

EventId 7030

Source Service Control Manager

PanInstaller is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly ...

I have tried to disable the service "Interaction Services Detection" but that does not help.

Could it be that this program is not comaptible with Windows 7?

We have PAN OS 3.1.4

/Erik

[johnnywong]

Hi Erik,

I just know v3.1.4 NetConnect supports both 32bit and 64bit Windows 7. Did you try to use a new installed OS on another machine?

Johnny

[pkruse]

Erik,

Lets go the low hanging fruit method and see if this helps.

1. is your version of Java the current distro?

2. have you tried installing with a differnt browser?

3. Are you installing with other than administrator credentials?

4. Have you attempted a manual install ( when all else fails)?

You can extract the MSI installers by downloading the installer from the firewall. Use your favorite ZIP extractor to open the .jar file and it will allow you to pull the installer files. They will be identified with an according bit level.

[djbisbey]

Hi,

we have just implemented the VPN solution and it works brilliantly on OSX but Windows 7 we find it will not install...

It downloads, does all its bits then stops, the Paninstaller.exe service is running, no netconnect or anything.

Rebooted nothing..

so we thought about downloading the VPN app from this site, but when we do we cannot use it as it is not recognised by Windows, we are now trying this on an XP machine, but its very weird that it fails to work on windows 7 (64bit).

So we could really do with finding a way to get the files out of the downloaded file, failing that is there anything else we can try...

Very odd indeed.

Will post XP results in a bit..

thanks in advance...

Darren

[djbisbey]

To confirm..

Windows XP - Works perfectly

Windows 7 Home Premium - will not install..

any ideas?

Darren

[James]

Hi Darren,

Check these out and see how you get on:

https://live.paloaltonetworks.com/docs/DOC-1391

https://live.paloaltonetworks.com/docs/DOC-1584

Thanks

James

[djbisbey]

Will try that now...

[djbisbey]

James,

seems to have fixed it using IE64

Is this by design or a bug?

Darren

[James]

Hi Darren,

Good to hear it is working!

I believe it is a tricky situation to run in 32-bit mode on a 64-bit windows machine - unless you are Microsoft themselves.  So it is a limitation working within the boundaries of Microsoft.  On Apple, for example, it is much easier to run in 32-bit mode whilst the OS is on 64-bit.

Anyway - if you got Windows 7.  Why not run everything in 64-bit mode, it is so much more fun

Thanks

James

[frank_henry]

I've had some difficulty in this area, as well. Looking at the documents, I don't  belive that 'Disabling Verification' under JAVA-Security-Mixed Code is a very good idea from a security standpoint.  I'd much rather see a native Windows Installer be an option (directly from PA) so that these could be pushed with SMS unattended using a proper level of access.

[jleung]

Hi,

In future release we will revise the SSL VPN agent and you can have msi package for massive deployment more easily.

Stay tuned.

Jones

[sleung]

Hello all,

Martin (our PLM) alerted me about the NetConnect installation issue.

I have just verified with the latest Java that NetConnect should install successfully without disabling the mixed code verification in Java.

You do need to use IE64 bit to install and run NetConnect

or else it will not find the correct installation directory.  Windows will put all the device driver (NetConnect virtual interface) in the wrong directory if you don't use IE64.  Remember that PanService (64 bit) expects the driver to be installed in the correct 64 bit directory too.

You also need both Java 32 bit and 64 bit installed.

If you still have issues installing and running NetConnect in Win7 64 bit, feel free to let me know.

- Siu-Wang Leung

[sleung]

One thing I would like to add in case people do not know.

If you want to extract the native Windows installer from the gateway,

you can do the following:

Use any browser to type the following URL in your browser:

https://<ssl-vpn-gateway-ip>/ssl-vpn/jnlp/PanInstaller_x64.jar

(save the file)

and

https://<ssl-vpn-gateway-ip>/ssl-vpn/jnlp/PanSetup_x64.jar

(save the file)

Use "jar" program (from any JDK installation bin directory)

to extract the content

jar xvf PanInstaller_x64.jar

jar xvf PanSetup_x64.jar

You should get two native MSI packages that you can use to

install without Java/browser.

You do need Java to run the program, but at least the installation

can be done without going through the browser.

Hope this helps

= Siu-Wang Leung