Global Protect is saying it's disconnect but traffic still flows fine.

[tatrasystemsltd]

Having a strange issue since upgrading our PA450 to 10.2.8h3 whereby Global Protect users have an Always on connections the VPN connects as usual then the GP app tells us that the VPN is disconnected but actually the VPN is still connected and users can all work as usual. We were previously using version 10.2.4h4 and never saw this issue. Users are authenticated using a cert. We only upgrade due to the recent advisory CVE-2024-3400. It's not so much an issue as all users are working as if conditions are normal it's the GP app telling users they're not connected. GP Users are on Windows 10/11 and GP APP is version 6.2.0. If anyone has any pointers why that would be great we've been working fine for the best part of year until this.

[JayGolf]

Hi @tatrasystemsltd ,

I have never run into this issue before as well. When you say the users are connected, are you seeing their user info populate under the Current User section your gateway? Are you also seeing active sessions from those users as well? 

[tatrasystemsltd]

Hi Jay,

Yes we're still seeing the users with these symptoms connected on the gateway. And on the GP clients PC a "route print" will show all the VPN routes populated it's literally just the client itself suggesting it's not connected, so it's more of cosmetic issue. The users are just finding it irritating when it pops up. 

I'm guessing it's a bug in the software since the software upgrade due to the Vulnerability. We have a ticket open but it's been 3 weeks so far.