Global Protect Connected but no internet connectivity

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L0 Member

Global Protect Connected but no internet connectivity

Hi All,

We have recently configurated a Global Protect VPN in our environment.

 

As we extended it to more people we started facing few issues:

1. Not able to join zoom meetings.

2. outlook shows disconnected

3. Can not sign-in into skype

4. Suddenly internet connectivity drops and have to reboot the machine.

 

We are running global protect on PA- 850 (8.1.11) and Global Protec Client 5.0.8-4

 

We are making use of "Pre-log on on-demand" connection method.

 

Has any one of you faced same kind of issues?

Highlighted
Cyber Elite

@Nikhil300992 

 

so do you mean to say that zoom and outlook were for sometime and then gets disconnected or it never gets connected at all?

Are you using split tunnel?

What does traffic  log shows for connection to outlook and zoom and Skype?

Does other internet website works fine without issues?

 

Regards

MP
Highlighted
L0 Member

Zoom and outlook have intermittent connectivity. 
It works for some time and shows disconnected, iser have to refresh the connection or reconnect to make it work. 

zoom calls keeps on spinning. 

yes, we are making use of Split tunnel. 
We are excluding “*.zoom.us” but still UDP-8801 traffic can be seen in the firewall logs. 

traffic logs, route tables, everything looks fine as per the TAC. 

even though GP shows connected, some times user also loose internet connecivity, can not open any website (internal and external), can not resolve DNS, can not ping 8.8.8.8. 

i want to ask one question, what if system has 2 VPN solutions, Cisco Any Connect and Global Protect, does this creates an issue, TAC said if 2 solutions are running on system, it may create an issue. (But i am not convinced with statement)

 

Highlighted
Cyber Elite

@Nikhil300992 

 

Yes you can have two VPN solutions on the Laptop.

You can only use one at a time to avoid any issues.

 

Depending on your requirement you can switch between the two.

As you are working with TAC then he should fix your issue if not you can escalate to next level.

I can only guess here as i do not know your PA configuration and Network Topology.

 

Regards

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!