12-08-2021 11:26 AM
I have several clients that their Global protect (5.2.9) does nothing when they click the connect button. This behavior began with the retirement of Sophos AV. Reinstalling Sophos makes it work again however. Our organization is in the process of retiring Sophos for another AV product. This only affects some machines, most continue to work after uninstalling Sophos.
I have tried to reinstall GP. In the client logs I see this repeated
(P10960-T6260)Info ( 202): 12/06/21 08:03:26:635 New Connection(127.0.0.1:56917) with socket(952)
(P10960-T6260)Debug( 349): 12/06/21 08:03:26:636 Socket is connected by C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
(P10960-T6260)Info ( 376): 12/06/21 08:03:43:280 EVP_DecryptFinal_ex failed
(P10960-T6260)Error( 440): 12/06/21 08:03:43:280 Failed to decrypt data
(P10960-T6260)Info ( 219): 12/06/21 08:03:43:280 Error processing receive data from client
(P10960-T6260)Info ( 228): 12/06/21 08:03:43:280 close client socket
(P10960-T6260)Info ( 202): 12/06/21 08:03:48:280 New Connection(127.0.0.1:56919) with socket(1360)
(P10960-T6260)Debug( 349): 12/06/21 08:03:48:281 Socket is connected by C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
(P10960-T6260)Info ( 376): 12/06/21 08:04:11:065 EVP_DecryptFinal_ex failed
(P10960-T6260)Error( 440): 12/06/21 08:04:11:065 Failed to decrypt data
(P10960-T6260)Info ( 219): 12/06/21 08:04:11:065 Error processing receive data from client
(P10960-T6260)Info ( 228): 12/06/21 08:04:11:065 close client socket
(P10960-T6260)Info ( 202): 12/06/21 08:04:16:066 New Connection(127.0.0.1:56921) with socket(972)
(P10960-T6260)Debug( 349): 12/06/21 08:04:16:066 Socket is connected by C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
(P10960-T6260)Info ( 376): 12/06/21 08:04:31:596 EVP_DecryptFinal_ex failed
(P10960-T6260)Error( 440): 12/06/21 08:04:31:596 Failed to decrypt data
(P10960-T6260)Info ( 219): 12/06/21 08:04:31:596 Error processing receive data from client
(P10960-T6260)Info ( 228): 12/06/21 08:04:31:596 close client socket
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
