Global Protect VPN frequently getting disconnected

[preetpk]

Hi,

We are facing issue with Global Protect VPN client connectivity for one of the user machine. Below are the details of the issue.

-> Global Protect VPN is very frequently getting disconnected

-> in Global Protect VPN connection stauts - can only see Packets Out , there are not Packets In.

In GP event logs can see "Tunnel is down due to keep-alive timeout" logs

Please let me know what can be the possible reason for GPVPN frequently disconnecting - but once connected there is no connectivity to corporate VPN over GPVPN.

Attaching the Global Protectlogs debug logs took from user n=machine during the time for issue.

Note: Issue is happening on for one user.For rest all users GPVPN is connecting fine.

[nate1]

We had this issue come up with a brand new 3410 running 10.2.1 and found a work-around. The issue is either caused by the keepalives not being sent correctly or not being detected correctly. This was causing every vpn user's connection to reset every 10min, you can imagine how happy they were. We found out is was because the gateway idle timer was set to 10min. Even though the connections were active and passing a lot of traffic the keepalives weren't being detected. We changed the idle timer to 24hrs and it fixed it as a work around. Palo support still hasn't provided any solution for this.

[Mazarine]

Hi,

We don't see any solution
Some private message ?
Is some one have the solution ?
For my case, the problems begun from globalprotect upgrade to 6.0.1

Thanks

Greetings

Franck

[nate1]

You have to modify the global protect gateway idle timeout to however long you want them to stay connected as a work around until Palo fixes the bug. Otherwise since it doesn't correctly detect the keepalives it will disconnect as soon as it hits the idle timeout.

[jruck]

We started having the same issue after upgrading to 10.1.6. No issue on 10.0.10.

[frankis]

We're running into the same issue. Just updated from 10.0.6 to 10.1.6 and users are being disconnected shortly after connecting to the gateway that was recently updated to 10.1.6