Failed to create tunnel with gateway

[Stefan_Somogyi]

We have some Windows 11 clients in our environment, which cannot create a tunnel to the gateway. The Global Protect Version is 6.2.7-1047. 

In the PanGPS.log, I see the following errors:

connect failed with 5 seconds timeout.
Failed to connect to captive.apple.com on 80 with return value -1 and socket error 0(0)
TSLog: Set error_stage = Tunnel creation, error = Failed to get default route entry
SetRoutes: GetRouteTableEntry(172.28.xxx.xx) failed
Error setting routes
add ipv4 address failed. 0x2-0.
FindAndUpdateAdapterAddress failed.
SetupNetwork() failed
sslvpn failed to start
CreateTunnel: SetConfig() failed
--Set state to Connection failed
failed to create tunnel with gateway xxxx.gw.gpcloudservice.com
NetworkDiscoverThread: failed to discover external network.
local system error, set error as The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon. If the issue persists, try restarting your system.

This happens in the corp net and from remote. The only solution is to reboot the client. 

The entry "Connection to captive.apple.com failed" in the log is really strange, since the user neither owns an iPhone nor uses a hotspot from a mobile phone to his laptop.

Reproduction:

1. The user shutdown the notebook after work
2. Start up the notebook in the morning and log into windows 11
3. The Global Protect APP tries to connet to the gateway
4. After a few attempt, the Error message "Status: Disconnected. The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon. If the issue persists, try restarting your system." is shown.
5. User restart the notebook
6. User log into Windows and the second attempt of the Global Protect to connect to the gatway is always successfully. 
7. After the connection is successful, the connection to the gateway remains without problems during the day.

Any help would be appreciated

[emr_1]

In Addressed issues of 6.2.8, it sounds similar to your issue:

https://docs.paloaltonetworks.com/globalprotect/6-2/globalprotect-app-release-notes/globalprotect-ad...

GPC-21653

Fixed an issue where the GlobalProtect virtual adapter was not set up correctly.

I'm not sure you are hitting this issue, though if you have any chance, try with the latest and see how it goes.

[Stefan_Somogyi]

Thank you for the referenced issue. I have seen this, but the details to the issue doesn't match. But I'll give it a try. We need to package the new version and this will take some time.