VPN - INTERMITTENT/UNSTABLE VPN CONNECTION

Reply
Highlighted
L1 Bithead

VPN - INTERMITTENT/UNSTABLE VPN CONNECTION

Hi,

In my team multiple users upgraded windows 7 to windows 10 after that VPN intermittent issue happened. every 5 seconds VPN(GP Clint) is disconnected. i tried uninstalled GP in mobile and also laptop but still same happened. latency is normal and tracert is completed.. How can resolve this please update.

 

This morning, we had a walk in user that is having issue with SAP, upon checking, it is caused by VPN reconnecting after 4-5 mins. Here are the details:-

 

  1. User was connected to mobile hotspot.
  2. User has tested at in-law house on different network provider and no issue found.
  3. User was previously using windows 7 and recently migrated to Windows 10. However, she was able to use VPN after the migration. It was last month, all of the sudden the issue occur
Highlighted
L4 Transporter

@Amarparade ,

 

What GlobalProtect version are you using? What is your FW version? Have you check GP client logs - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaLCAS 

L1 Bithead

  1.  GP Version 5.0.10
  2. FW Version GP agent 5.0.10
  3. FW SW Version 9.0.9

Yes please check below logs

Amarparade_0-1602067724489.png

 

Highlighted
Cyber Elite

@Amarparade,

So according to your log file it's losing its connection to the GP gateway, which is what's causing your disconnect. If we take away GlobalProtect for a second, do these devices lose access to the actual gateway outside of the agent? 

When you say you upgraded Windows 7 clients to Windows 10, did you do an in-place upgrade? 

Highlighted
L1 Bithead

yes, upgraded 7 to 10 and issue occurred in home wifi  and hotspot in office wifi it works fine.

Highlighted
Cyber Elite

@Amarparade,

So the test that you would have to do is whether or not the actual computer loses connection to the gateway or if it's just an agent. So you'll need to setup a continual loop to the gateway itself and log it, so that you can compare that log when you run into the issue with the GlobalProtect VPN agent again. Essentially, what you're looking for is if you lose your IPSec connection AND access to the gateway address altogether or if you just lose the actual tunnel. 

The fact that it works on the office wireless doesn't really mean much without knowing how GlobalProtect is configured. When your internal to your office wireless network does the traffic actually get tunneled through GlobalProtect, do you connect to a dedicated internal gateway? There's a lot of variables on that one to rule out anything other than your actual agent isn't the issue. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!