01-08-2016 08:10 AM
Our VPN users are complaining that after being connected for over 1 hour they get disconnected by global protect. They have to close global protect and reopen to connect back. We have remote customer service agents that get disconnected up to 4 to 5 times a day. We are running global protect version 2.3.3-5. We have opened a ticket with support and have escalated and had no success. Anybody else having this issue? Any luck getting resolved.
01-08-2016 08:47 AM
what type of firewall and version of PanOS would help as well
I am not experiencing, but I have not upgraded my users to 2.3.3 because I am (still) waiting for a better upgrade and delivery system.
01-08-2016 09:03 AM
3020s running 7.0.3
01-08-2016 09:05 AM
I would try upgrading to 7.0.4, much better "production" release.
01-10-2016 03:52 AM
86803 Fixed an intermittent issue where the idle timer for GlobalProtect IPSec tunnels either did
not expire appropriately (such as when the tunnel was torn down) or expired at the
configured idle time expiration even when a user was actively using the connection. With
this fix, the GlobalProtect IPSec tunnel idle timer behaves as expected.
It is fixed in 7.0.4 and 6.1.8 (allthough it isn't mentioned in the 6.1.8 release document)
Can confirm it is working on 6.1.8 and 7.0.4, you should REALLY upgrade to the 7.0.4 release, it is night and day in comparison to the 7.0.1-7.0.3 releases.
01-13-2016 11:33 AM
We upgraded to 7.0.4 on 1-9-2016 and still having problems with global protect disconnects. Any other ideas?
01-13-2016 11:34 AM
sure there isnt an issue with the Internet or something down the line along their route to using VPN?
01-13-2016 12:34 PM
This is affecting several customer service agents that work from their home in different parts of the US. It has been escalated to Palo Alto engineering now. Still no resolution.
01-13-2016 12:35 PM
From the logs on the client I see that the service sees a packet that seems to corrupted and this causes the service to close the connection.
(T15964) 12/22/15 10:17:52:802 Error( 306): read(zero byte) failed: 0 >>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 184): Error processing receive data from client>>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 190): close client socket
(T15992) 12/22/15 10:17:52:894 Debug( 142): CheckPanGpAgentThread: PanGPA process 15984 exits, ret is 00e88eb0.
(T15992) 12/22/15 10:17:52:894 Debug( 150): GlobalProtect agent terminates unexpectedly. Skip StopThreads().>>>>> !!!
Everytime we close out the connection, it is because of this packet that we see. On the firewall I see that the client disconnects with the firewall.
As of now Support nor Engineering has an answer.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!