11-15-2020 11:25 AM
Hi,
My employer has recently changed their VPN and are now using Global Protect.
I was given the installation software to install Global Protect version 5.2.2-4 onto my home PC (Windows 10).
Windows specifications
Edition: Windows 10 Pro
Version: 20H2
OS Build: 19042.630
I installed the software and once I added my company's VPN port address to the Global Protect client I was able to connect straight away without any issues.
At the time of installing Global Protect and using it without any issues my PC was using an external USB WiFi adapter to connect wirelessly to my home Amplifi HD mesh router.
I have now added an Ethernet cable from the same Amplifi HD mesh router to my PC and was expecting to be able to use this connection of all activities on my PC.
With the external USB WiFi adapter disabled in Windows and the Ethernet cable connection enabled in Windows I'm am to connect to the internet as I did before but have much faster speeds.
Unfortunately in this configuration the Global Protect doesn't work. If I use the Ethernet cable connection Global Protect will connect for say 30 seconds and then disconnects and this keeps repeating until I click the "Disconnect" button on Global Protect.
Whilst Global Protect is connected I lose ALL internet access on my PC.
The only way I can get internet access back on my PC is to disable the Ethernet cable connection in Windows and then re-enable the external USB WiFi adapter in Windows.
I can't see any difference between the two network connections on my PC and have tried disabling my Firewall but that has no effect.
Does anyone know what else I could try?
Thanks.
11-18-2020 06:27 AM - edited 11-18-2020 06:28 AM
The local logs will probably tell you why it's disconnecting. go to the troubleshooting tab and collect logs. The pangps file will be a good starting point.
11-18-2020 09:30 AM
I switched over to my Ethernet connection and tried connecting to my company VPN. I waiting a few minutes and observed 3 disconnections / re-try attempts whilst connected. I captured the PanGPS.log and the contents I have pasted below, changing sensitive information.
PanGPS.log Part 1 (as it exceeds the 80,000 character limit for posts!)
(T6748)Info ( 502): 11/18/20 16:43:26:358 msgtype = portal (T6748)Debug(2205): 11/18/20 16:43:26:358 ----portal processing starts---- (T6748)Debug(2233): 11/18/20 16:43:26:358 User profile type is 0(not roaming) (T6748)Debug(2266): 11/18/20 16:43:26:358 pg, source = 0, old source is 0 (T6748)Debug(2288): 11/18/20 16:43:26:358 pg, preferred gateway not set in message, old prefergateway=:) (T6748)Debug(2345): 11/18/20 16:43:26:358 CheckUpdate is false. )(T6748)Debug(2360): 11/18/20 16:43:26:358 portal-certificate-verification is yes (T6748)Debug(2400): 11/18/20 16:43:26:358 No saml-load-cache tag. (T6748)Debug(2423): 11/18/20 16:43:26:358 no saml-auth-error tag. (T6748)Debug(2434): 11/18/20 16:43:26:358 allow-cached-portal is yes (T6748)Debug(2478): 11/18/20 16:43:26:358 NewWinUser is User1, WinUser is User1, PreviousSwitchOffMsg is false (T6748)Debug(2479): 11/18/20 16:43:26:358 GetPrelogonStatus() 0, m_userName username1, m_preUsername username1 (T6748)Debug(3235): 11/18/20 16:43:26:358 Grace period is 0 (T6748)Debug(6475): 11/18/20 16:43:26:358 StopThreads starts: (T6748)Debug(6482): 11/18/20 16:43:26:358 There are 5 threads running... (T6748)Debug(1354): 11/18/20 16:43:26:358 Logging out gateway, reason is StopThreads (T6748)Debug(1393): 11/18/20 16:43:26:358 Logging out gateway over (T6748)Debug(6492): 11/18/20 16:43:26:358 Going to wait all threads exit... (T16444)Debug(6246): 11/18/20 16:43:26:358 NetworkConnectionMonitorThread: got exit event. (T2596)Debug(5808): 11/18/20 16:43:26:358 HipReportThread: got exit event. (T2596)Debug(6107): 11/18/20 16:43:26:358 HipReportThread: HipReportThread quits. (T16444)Debug(6261): 11/18/20 16:43:26:358 NetworkConnectionMonitorThread: quits. (T17916)Debug(4785): 11/18/20 16:43:26:358 NotificationTimerThread: got exit event. (T30932)Debug(4986): 11/18/20 16:43:26:358 CaptivePortalDetectionThread: got exit event. (T30932)Debug(5150): 11/18/20 16:43:26:358 CaptivePortalDetectionThread: captive portal detection thread exit status is (successful). (T35560)Debug(5235): 11/18/20 16:43:26:358 NetworkDiscoverThread: got exit event. (T35560)Debug(5675): 11/18/20 16:43:26:358 NetworkDiscoverThread: quits. (T6748)Debug(6496): 11/18/20 16:43:26:467 threads are gracefully stopped, counter=599. (T6748)Debug(6509): 11/18/20 16:43:26:467 Double check all threads. (T6748)Debug(6555): 11/18/20 16:43:26:467 To reset thread quit event. (T21184)Debug( 242): 11/18/20 16:43:26:467 HipCheckThread: got thread exit event. (T3996)Debug( 418): 11/18/20 16:43:26:467 HipMonitor gets quit event. (T3996)Debug( 435): 11/18/20 16:43:26:467 Unregister -- WscUnRegisterChanges (T3996)Debug( 763): 11/18/20 16:43:26:483 HipMonitorThread quits. (T21184)Debug( 287): 11/18/20 16:43:26:483 HipCheckThread: Hip check thread quits. (T7416)Debug( 533): 11/18/20 16:43:26:483 HipMissingPatchThread: Hip check missiing patch thread quits. (T6748)Debug( 132): 11/18/20 16:43:26:483 All hip collect threads quit gracefully. (T6748)Debug(6565): 11/18/20 16:43:26:483 StopThreads ends. (T6748)Debug(6439): 11/18/20 16:43:26:483 StartThreads starts: (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x4e8 with thread ID 36656 (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x334 with thread ID 29708 (T36656)Debug(4628): 11/18/20 16:43:26:483 NotificationTimerThread: notification timer thread starts. (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x7a0 with thread ID 19740 (T36656)Debug(4778): 11/18/20 16:43:26:483 NotificationTimerThread: wait (-1 ms) for notification timer event. (T19740)Debug(5160): 11/18/20 16:43:26:483 NetworkDiscoverThread: network discover thread starts. (T19740)Debug(5225): 11/18/20 16:43:26:483 NetworkDiscoverThread: wait for network discover event. (T29708)Debug(4824): 11/18/20 16:43:26:483 CaptivePortalDetectionThread: captive portal detection thread starts. (T29708)Debug(4983): 11/18/20 16:43:26:483 CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x6c4 with thread ID 7180 (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x72c with thread ID 31296 (T7180)Debug(5767): 11/18/20 16:43:26:483 HipReportThread: HipReportThread starts up. (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x4ec with thread ID 5304 (T7180)Debug(5800): 11/18/20 16:43:26:483 HipReportThread: wait for HIP report reUser1 event. (T31296)Debug(6115): 11/18/20 16:43:26:483 NetworkConnectionMonitorThread: network connection monitor thread starts. (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x730 with thread ID 13964 (T5304)Debug( 167): 11/18/20 16:43:26:483 Start HipCheckThread (T6748)Debug( 25): 11/18/20 16:43:26:483 create thread 0x798 with thread ID 30724 (T5304)Debug( 210): 11/18/20 16:43:26:483 HipCheckThread started... (T5304)Debug( 216): 11/18/20 16:43:26:483 HipCheckThread: wait for hip check event for 3600000 ms); (T13964)Debug( 176): 11/18/20 16:43:26:483 Start HipMissingPatchThread (T13964)Debug( 409): 11/18/20 16:43:26:483 HipMissingPatchThread started... (T13964)Debug( 442): 11/18/20 16:43:26:483 HipMissingPatchThread: now is 1605717806, last hip check is 1605717412, hip check interval is 3600000 (T13964)Debug( 447): 11/18/20 16:43:26:483 HipMissingPatchThread: wait 3206000 ms (T30724)Debug( 186): 11/18/20 16:43:26:483 Start HipMonitorThread (T30724)Info ( 759): 11/18/20 16:43:26:483 HipMonitorThread starts (T6748)Debug(10230): 11/18/20 16:43:26:483 Saved password is empty. (T6748)Debug(2659): 11/18/20 16:43:26:483 Portal vpn.acmecompany.com, user username1, logonDomain HOST-PC, saved user username1, path C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\ (T6748)Debug(2725): 11/18/20 16:43:26:483 use proxy is 1 (T6748)Debug(2783): 11/18/20 16:43:26:483 Pre-logon-then-on-demand value is no (T6748)Debug(1540): 11/18/20 16:43:26:483 SSO GetSsoCredential starts. (T6748)Info (1570): 11/18/20 16:43:26:483 SSO ----- PanCredGet failed with error Element not found. (T6748)Debug(10247): 11/18/20 16:43:26:483 SSO password is empty (T6748)Debug(2921): 11/18/20 16:43:26:483 m_preUsername username1 (T6748)Debug(10207): 11/18/20 16:43:26:483 Password is empty. (T6748)Debug(2942): 11/18/20 16:43:26:483 CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout 0, RenameTimeout -1, userName username1, preUsername username1 (T6748)Debug(3104): 11/18/20 16:43:26:483 Use ssl tunnel is no (T6748)Debug(3114): 11/18/20 16:43:26:483 bCheckCachedPortalForPrelogon: 0, m_bOnDemand: 1 (T6748)Debug(6598): 11/18/20 16:43:26:483 --Set state to Retrieving configuration... (T30724)Debug( 413): 11/18/20 16:43:26:483 HipMonitorThread wait for exit event. (T6748)Debug(12777): 11/18/20 16:43:26:522 Portal's ipv4 address 888.88.888.888 (T6748)Debug(7680): 11/18/20 16:43:26:522 SSO enable status is 0, user name is username1, domain name is . (T6748)Debug(2191): 11/18/20 16:43:26:522 open http session. agent is PAN GlobalProtect/5.2.2-4 (Microsoft Windows 10 Pro , 64-bit) (T6748)Debug( 465): 11/18/20 16:43:26:523 winhttp SetSecureProtocol, hSession=d2cc8880, bAllProtocol=0, gbFips=0 (T6748)Debug( 465): 11/18/20 16:43:26:523 winhttp SetSecureProtocol, hSession=d2cc82e0, bAllProtocol=0, gbFips=0 (T6748)Debug(1635): 11/18/20 16:43:26:524 SetProxyForHost(https://vpn.acmecompany.com/): timeout:5 AutoDetect:1 url: proxy: bypass: proxystr: (T6748)Debug(6643): 11/18/20 16:43:26:526 ----Portal Pre-login starts---- (T6748)Debug(4858): 11/18/20 16:43:26:526 TriggerCaptivePortalDetection() return due to captive portal detection is in progress (0) or PreLogin is Done (1) (T6748)Debug( 559): 11/18/20 16:43:26:534 Network is reachable (T6748)Debug(6676): 11/18/20 16:43:26:536 Pre-login...,verifyportalcert=yes (T6748)Debug(10636): 11/18/20 16:43:26:536 Check cert of server 888.88.888.888 (T6748)Debug( 780): 11/18/20 16:43:26:537 SSL connecting to 888.88.888.888 (T6748)Debug( 559): 11/18/20 16:43:26:537 Network is reachable (T6748)Debug(1286): 11/18/20 16:43:26:629 Unable to verify server cert. Result is unable to get local issuer certificate (T6748)Debug( 366): 11/18/20 16:43:26:629 Open_SSL_connection: subject '/C=GB/L=London/O=ACME Company Ltd/CN=*.acmecompany.com' (T6748)Debug( 370): 11/18/20 16:43:26:629 Open_SSL_connection: issuer '/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA' (T6748)Debug(1113): 11/18/20 16:43:26:629 Name vpn.acmecompany.com matches pattern *.acmecompany.com (T6748)Debug( 967): 11/18/20 16:43:26:629 Hostname vpn.acmecompany.com matches sub alt name *.acmecompany.com (T6748)Debug(1323): 11/18/20 16:43:26:629 OpenSSL alert write:warning:close notify (T6748)Debug(2646): 11/18/20 16:43:26:630 encpostdata, encpostdata=00000243D3BF88A0, encpostdatalen=176 (T6748)Debug(2815): 11/18/20 16:43:26:630 REQID=49,IPADDR=vpn.acmecompany.com,PORT=443,URL=/global-protect/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=1,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T6748)Debug(1600): 11/18/20 16:43:26:630 Send response to client for request https_request (T6748)Debug(2925): 11/18/20 16:43:26:738 receive pan_msg_ping, 3 (T6748)Debug(6788): 11/18/20 16:43:27:084 prelogin to portal result is Success false Enter login credentials Username Password 1GB (T6748)Debug(6823): 11/18/20 16:43:27:084 REGION-PRIO, region code is GB (T6748)Debug(12590): 11/18/20 16:43:27:084 REGION-PRIO, save region code GB (T6748)Debug(6910): 11/18/20 16:43:27:084 Portal authentication-message is Enter login credentials (T6748)Debug(6926): 11/18/20 16:43:27:084 autosubmit is false (T6748)Debug(8488): 11/18/20 16:43:27:084 ----Portal Login starts---- (T6748)Debug( 312): 11/18/20 16:43:27:084 No need to decrypt data with length 0 (T6748)Debug(2138): 11/18/20 16:43:27:084 Portal config digest is retrieved from file C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\PanPCD_a3d3cc5f2d548f56907d161ed1752f.dat. (T6748)Debug(2139): 11/18/20 16:43:27:084 Portal config digest is d2505c2d1c6ebe6b4ced6944550b4a5c (T6748)Debug( 41): 11/18/20 16:43:27:084 Roaming profile is false (T6748)Debug( 167): 11/18/20 16:43:27:099 profileInfo username User1, profile path (null), server (null) (T6748)Debug(2004): 11/18/20 16:43:27:130 Unserialized non-empty cookie for portal vpn.acmecompany.com and user username1 (T6748)Debug(1933): 11/18/20 16:43:27:130 Unserialized empty cookie for portal vpn.acmecompany.com and pre-logon user. (T6748)Debug(8547): 11/18/20 16:43:27:130 IsInPrelogon() 0, GetPrelogonStatus() 0 (T6748)Debug( 312): 11/18/20 16:43:27:130 No need to decrypt data with length 0 (T6748)Debug(7021): 11/18/20 16:43:27:130 use cached deviceSN (T6748)Debug(7021): 11/18/20 16:43:27:130 use cached deviceSN (T6748)Debug( 323): 11/18/20 16:43:27:130 ClearHipCustomCheckInfo(): pHipCustomCheckInfo is NULL. (T6748)Debug( 85): 11/18/20 16:43:27:130 ClearHipCustomCheckRegKeyInfo(): pHipCustomCheckRegKeyInfo is NULL. (T6748)Debug( 567): 11/18/20 16:43:27:130 pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\PanPortalCfgCriteria_a3d3cc5f2d548f56907d161ed1752f.dat (T6748)Debug( 77): 11/18/20 16:43:27:130 Portal config criteria is restored. (T6748)Debug( 567): 11/18/20 16:43:27:130 pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\PanPortalCfgCriteria_a3d3cc5f2d548f56907d161ed1752f.dat (T6748)Debug(8624): 11/18/20 16:43:27:130 m_szDomainAndUsername is username1 (T6748)Debug(2646): 11/18/20 16:43:27:130 encpostdata, encpostdata=00000243D37C3E70, encpostdatalen=768 (T6748)Debug(2815): 11/18/20 16:43:27:130 REQID=50,IPADDR=vpn.acmecompany.com,PORT=443,URL=/global-protect/getconfig.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T6748)Debug(1600): 11/18/20 16:43:27:130 Send response to client for request https_request (T6748)Debug(2925): 11/18/20 16:43:27:240 receive pan_msg_ping, 3 (T6748)Debug(8752): 11/18/20 16:43:27:380 Portal config digest matched (T6748)Debug( 41): 11/18/20 16:43:27:380 Roaming profile is false (T6748)Debug( 167): 11/18/20 16:43:27:396 profileInfo username User1, profile path (null), server (null) (T6748)Debug(13244): 11/18/20 16:43:27:427 Saved cache portal configuration hash does not exist (T6748)Debug(8755): 11/18/20 16:43:27:427 Restored cached portal config (T6748)Debug(2018): 11/18/20 16:43:27:427 Serialize non-empty cookie for portal vpn.acmecompany.com and user username1 (T6748)Debug( 41): 11/18/20 16:43:27:427 Roaming profile is false (T6748)Debug( 167): 11/18/20 16:43:27:427 profileInfo username User1, profile path (null), server (null) (T6748)Debug(2110): 11/18/20 16:43:27:443 Serialized portal user auth cookie to file C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_a3d3cc5f2d548f56907d161ed1752f.dat. 614 bytes. (T6748)Debug(13208): 11/18/20 16:43:27:443 Updated portal-prelogonuserauthcookie (T6748)Debug(13171): 11/18/20 16:43:27:443 New xml does not contain scep-cert-auth-cookie (T6748)Debug( 693): 11/18/20 16:43:27:443 No enforcer ip exception list defined! (T6748)Debug( 710): 11/18/20 16:43:27:443 enforcer exception: No fqdn ist defined. (T6748)Debug( 726): 11/18/20 16:43:27:443 enforcer exception: no app list defined. (T6748)Debug( 788): 11/18/20 16:43:27:443 No internal host detection defined (T6748)Debug( 876): 11/18/20 16:43:27:443 REGION-PRIO, gateway 0(vpn-kee-hw), 0, region = Any, priority = 1, portalRegion=GB (T6748)Debug( 413): 11/18/20 16:43:27:443 REGION-PRIO, regioncode=GB, return priority 1, bManual=0 (T6748)Debug( 981): 11/18/20 16:43:27:443 No internal gateway defined (T6748)Debug(1000): 11/18/20 16:43:27:443 Optional client-cert does not exist (T6748)Debug(9261): 11/18/20 16:43:27:443 Use proxy is true (T6748)Debug( 41): 11/18/20 16:43:27:459 Roaming profile is false (T6748)Debug( 167): 11/18/20 16:43:27:459 profileInfo username User1, profile path (null), server (null) (T6748)Debug( 82): 11/18/20 16:43:27:474 Saved portal config to file C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_a3d3cc5f2d548f56907d161ed1752f.dat. (T6748)Debug(1583): 11/18/20 16:43:27:474 Proxy auto detect is not needed (T6748)Debug(9354): 11/18/20 16:43:27:474 RefreshPortalConfig is yes, RefreshPortalConfigInterval is 24 hours (T6748)Debug(2158): 11/18/20 16:43:27:474 SerializePortalConfigDigest to file C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\PanPCD_a3d3cc5f2d548f56907d161ed1752f.dat (T6748)Debug(2159): 11/18/20 16:43:27:474 Portal config digest is d2505c2d1c6ebe6b4ced6944550b4a5c (T6748)Debug(11794): 11/18/20 16:43:27:474 kerberos, dynamic config value is yes, m_stopOnKerberosFail=0 (T6748)Debug(11824): 11/18/20 16:43:27:474 Timeout value: portal 5, connect 5, receive 30, retry 5 (T6748)Debug(11827): 11/18/20 16:43:27:474 Tunnel retry grace period is 1800 seconds (T6748)Debug(11830): 11/18/20 16:43:27:474 override-cc-username is no (T6748)Debug(11833): 11/18/20 16:43:27:474 split-tunnel-option is network-traffic (T6748)Debug(9393): 11/18/20 16:43:27:474 Scep certificate renew period is 7 days. Scep cert auth cookie length is 0 (T6748)Debug(9404): 11/18/20 16:43:27:474 Otp portal 0, otp internal gateway 0, otp auto external gateway 0, otp manual only external gateway 0 (T6748)Debug(9409): 11/18/20 16:43:27:474 Prefer ipv6 is 1 after processing portal configuration. (T6748)Debug(9420): 11/18/20 16:43:27:474 Quarantine add message is (T6748)Debug(9421): 11/18/20 16:43:27:474 Quarantine remove message is (T6748)Debug(8776): 11/18/20 16:43:27:474 Skip parsing password expiration days because portal config digest matched (T6748)Debug(8806): 11/18/20 16:43:27:474 No scep profile (T6748)Debug(7908): 11/18/20 16:43:27:474 portal status is Connected. (T6748)Debug(12147): 11/18/20 16:43:27:474 Enforcer is not enabled (T6748)Debug(1893): 11/18/20 16:43:27:521 Enforcer,found 0 filter object belonging to us. (T6748)Debug( 41): 11/18/20 16:43:27:521 Roaming profile is false (T6748)Debug( 167): 11/18/20 16:43:27:537 profileInfo username User1, profile path (null), server (null) (T6748)Debug(3785): 11/18/20 16:43:27:537 CPanMSServiceWin::IsGpDisabledForCurUser() - bGpIsDisabled=0. (T6748)Debug(8891): 11/18/20 16:43:27:537 Delete the previous trusted root ca file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer (T6748)Debug( 82): 11/18/20 16:43:27:537 Saved root CA(1635 bytes) into file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer. (T6748)Debug(9007): 11/18/20 16:43:27:537 client cert is empty in portal config (T6748)Debug(2441): 11/18/20 16:43:27:537 Client cert is empty, no need to import to store (T6748)Debug( 320): 11/18/20 16:43:27:537 PanIsSSORegisted: did not find CP. (T6748)Info (8159): 11/18/20 16:43:27:537 Connect method is On-Demand (T6748)Debug(8179): 11/18/20 16:43:27:537 On-demand mode is true. (T6748)Debug(9624): 11/18/20 16:43:27:537 SavePrelogon: Portal is vpn.acmecompany.com, PrelogonEnabled is 0 (T6748)Debug( 477): 11/18/20 16:43:27:537 Saved hip policy to file HipPolicy.dat. (T6748)Debug(8212): 11/18/20 16:43:27:537 Hip check interval is 3600000 ms. (T6748)Debug(8216): 11/18/20 16:43:27:537 Set check hip event (T6748)Debug( 809): 11/18/20 16:43:27:537 m_bScheduleFlag is set to 0 (T6748)Debug( 297): 11/18/20 16:43:27:537 Set hip check event. (T6748)Debug(8218): 11/18/20 16:43:27:537 Set hip missing patch check event. (T6748)Debug(8279): 11/18/20 16:43:27:537 Skip serialize portal user auth cookie for matched portal config digest (T6748)Debug(1901): 11/18/20 16:43:27:537 Serialize empty cookie for portal vpn.acmecompany.com and pre-logon user (T13964)Debug( 452): 11/18/20 16:43:27:537 HipMissingPatchThread: Got CheckHipMissingPatchEvent. (T5304)Info ( 246): 11/18/20 16:43:27:537 HipCheckThread: got check hip event or time out. (T13964)Debug( 386): 11/18/20 16:43:27:537 CheckHipMissingPatchInOtherProcess() (T5304)Debug( 255): 11/18/20 16:43:27:537 HipCheckThread: Got CheckHipEvent. (T13964)Debug( 389): 11/18/20 16:43:27:537 Need to check missing patch. (T5304)Debug( 787): 11/18/20 16:43:27:537 SetNextScheduledHipCheckTime to 1605721407 (T5304)Debug( 276): 11/18/20 16:43:27:537 Last hip check event wakeup tick is 1605717807 (T5304)Debug( 278): 11/18/20 16:43:27:537 HipCheckThread: check hip in other process. (T5304)Debug( 306): 11/18/20 16:43:27:537 CheckHipInOtherProcess() (T5304)Debug( 310): 11/18/20 16:43:27:537 Need to collect hip data (T13964)Debug( 310): 11/18/20 16:43:27:537 CheckHipMissingPatchInOtherProcess(): Starting process PanGpHipMp.exe (T5304)Debug( 117): 11/18/20 16:43:27:537 Starting process PanGpHip.exe (T6748)Debug(1908): 11/18/20 16:43:27:537 SerializePortalPrelogonAuthCookie to file PanPPAC_e8da482c86e266d391d244873eb9120.dat (T6748)Debug(8304): 11/18/20 16:43:27:537 Retrieved pre-logon-tunnel-rename-timeout value -1 (T6748)Debug(8312): 11/18/20 16:43:27:537 Retrieved user-switch-tunnel-rename-timeout value 0 (T6748)Debug(8331): 11/18/20 16:43:27:537 Cannot retrieve preserve-tunnel-upon-user-logoff-timeout (T6748)Debug(8336): 11/18/20 16:43:27:537 Set preserver tunnel timeout to 0 (T6748)Debug(8348): 11/18/20 16:43:27:537 The value of can-continue-if-portal-cert-invalid is yes (T6748)Debug(8409): 11/18/20 16:43:27:537 No Uninstallation method tag (T6748)Debug(4368): 11/18/20 16:43:27:537 SaveUninstallConfig(T6748)Debug(7340): 11/18/20 16:43:27:537 prelogon status is 0 (T6748)Debug(3235): 11/18/20 16:43:27:537 Grace period is 0 (T6748)Debug(7484): 11/18/20 16:43:27:537 Force discovery, set NetworkDiscoverEvent (T19740)Debug( 554): 11/18/20 16:43:27:537 Set hip report quit event (T19740)Debug(5241): 11/18/20 16:43:27:537 NetworkDiscoverThread: got network discover event. (T19740)Debug(5248): 11/18/20 16:43:27:537 ----Network Discover starts---- (T19740)Debug( 787): 11/18/20 16:43:27:537 SetNextScheduledHipCheckTime to 0 (T19740)Debug( 809): 11/18/20 16:43:27:537 m_bScheduleFlag is set to 0 (T19740)Debug(5260): 11/18/20 16:43:27:537 UpdatePrelogonStateForSSO to GP_VPN_STATUS_DISCONNECTED (T19740)Debug(4101): 11/18/20 16:43:27:537 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T6748)Debug(1600): 11/18/20 16:43:27:537 Send response to client for request hip (T5304)Debug( 135): 11/18/20 16:43:27:552 Wait for the reUser1 event of hip report generated in other process. (T19740)Debug( 559): 11/18/20 16:43:27:578 Network is reachable (T19740)Debug(1908): 11/18/20 16:43:27:580 bNetworkAvailable is 1 (T19740)Debug(1916): 11/18/20 16:43:27:580 Network is available (T19740)Debug(5283): 11/18/20 16:43:27:580 finish check host reachable (T19740)Debug(6598): 11/18/20 16:43:27:580 --Set state to Discovering network... (T29708)Debug(5006): 11/18/20 16:43:27:580 CaptivePortalDetectionThread: IsDetectingCaptivePortal=1, PreLoginIsDone=0 (T29708)Debug(4983): 11/18/20 16:43:27:580 CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event. (T19740)Debug(1052): 11/18/20 16:43:27:580 Display hip report V4 on the UI (T19740)Debug(5321): 11/18/20 16:43:27:580 Logout gateways before network discover..., bJustResumed=0 (T19740)Debug(1354): 11/18/20 16:43:27:580 Logging out gateway, reason is Network discover (T19740)Debug(1393): 11/18/20 16:43:27:580 Logging out gateway over (T19740)Debug( 330): 11/18/20 16:43:27:580 Parse gateway list for user username1 (T19740)Debug(12477): 11/18/20 16:43:27:580 RetrieveClientIpByRemoteHost() - invalid remote host: . (T19740)Debug( 196): 11/18/20 16:43:27:580 SelectInternalGateways - failed to retrieve client source ipv6! (T19740)Debug(5277): 11/18/20 16:43:27:580 Process gateway: host vpn.acmecompany.com, description vpn-kee-hw (T19740)Debug(5354): 11/18/20 16:43:27:580 Gateway vpn.acmecompany.com ipv4 address is 888.88.888.888 (T19740)Debug(5422): 11/18/20 16:43:27:580 Gateway vpn.acmecompany.com: ipv4 888.88.888.888, ipv6 , FQDN yes (T19740)Debug(5344): 11/18/20 16:43:27:580 Set network discover in progress (T19740)Debug(5348): 11/18/20 16:43:27:580 UpdatePrelogonStateForSSO to GP_VPN_STATUS_DISCONNECTED (T19740)Debug(4101): 11/18/20 16:43:27:580 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T19740)Debug(5409): 11/18/20 16:43:27:580 NetworkDiscoverThread: network type is external. (T19740)Debug(5482): 11/18/20 16:43:27:580 NetworkDiscoverThread: Discover external network. (T19740)Debug(5521): 11/18/20 16:43:27:580 previous it is 0, now it is 0 (T19740)Debug( 530): 11/18/20 16:43:27:580 Discover external gateway: gateway count is 1, cutoff time is 5, bJustResumed=0 (T19740)Debug( 550): 11/18/20 16:43:27:580 One external gateway vpn.acmecompany.com, priority=1, manual is 0 (T19740)Debug(2969): 11/18/20 16:43:27:580 Gateway: vpn.acmecompany.com, client IP: 192.168.100.100 (T19740)Debug(2569): 11/18/20 16:43:27:580 retrieve info of gateway vpn.acmecompany.com (T19740)Debug(2191): 11/18/20 16:43:27:580 open http session. agent is PAN GlobalProtect/5.2.2-4 (Microsoft Windows 10 Pro , 64-bit) (T19740)Debug( 465): 11/18/20 16:43:27:580 winhttp SetSecureProtocol, hSession=d2cc82e0, bAllProtocol=0, gbFips=0 (T19740)Debug(2580): 11/18/20 16:43:27:580 Skip setting proxy for creating tunnel to gateway vpn.acmecompany.com (T19740)Debug(3403): 11/18/20 16:43:27:580 m_msp->IsInPreserveTunnel() 0, m_msp->IsPrelogonRenameAuthFail() 0 (T19740)Debug(13152): 11/18/20 16:43:27:580 Set m_bPrelogonRenameAuthFail to 0 (T19740)Debug(3439): 11/18/20 16:43:27:580 ----Gateway Pre-login starts---- (T19740)Debug(10636): 11/18/20 16:43:27:580 Check cert of server 888.88.888.888 (T19740)Debug( 780): 11/18/20 16:43:27:580 SSL connecting to 888.88.888.888 (T19740)Debug( 559): 11/18/20 16:43:27:580 Network is reachable (T19740)Debug(1286): 11/18/20 16:43:27:677 Unable to verify server cert. Result is unable to get local issuer certificate (T19740)Debug( 366): 11/18/20 16:43:27:677 Open_SSL_connection: subject '/C=GB/L=London/O=ACME Company Ltd/CN=*.acmecompany.com' (T19740)Debug( 370): 11/18/20 16:43:27:677 Open_SSL_connection: issuer '/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA' (T19740)Debug(1113): 11/18/20 16:43:27:677 Name vpn.acmecompany.com matches pattern *.acmecompany.com (T19740)Debug( 967): 11/18/20 16:43:27:677 Hostname vpn.acmecompany.com matches sub alt name *.acmecompany.com (T19740)Debug(1323): 11/18/20 16:43:27:677 OpenSSL alert write:warning:close notify (T19740)Debug(6095): 11/18/20 16:43:27:677 pretunnel latency (manual gateway) is 21 (T19740)Debug(3497): 11/18/20 16:43:27:677 m_msp->GetGwSamlAuthStatus() -2, m_msp->IsUserJustLoginInPrelogon() 0, m_msp->IsPrelogonRenameAuthFail() 0 (T19740)Debug(3518): 11/18/20 16:43:27:677 IsSamlAuth() 0, IsManualGatewayChallenge() 0, pwszConnectedIP null (T19740)Debug(10856): 11/18/20 16:43:27:677 Need to check gateway cert for vpn.acmecompany.com (T19740)Debug(2646): 11/18/20 16:43:27:677 encpostdata, encpostdata=00000243D3BF76A0, encpostdatalen=176 (T19740)Debug(2815): 11/18/20 16:43:27:677 REQID=51,IPADDR=vpn.acmecompany.com,PORT=443,URL=/ssl-vpn/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=1,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T19740)Debug(1600): 11/18/20 16:43:27:763 Send response to client for request https_request (T19740)Debug(2925): 11/18/20 16:43:27:874 receive pan_msg_ping, 3 (T19740)Debug(3560): 11/18/20 16:43:27:901 Login to gateway (null) vpn.acmecompany.com without ipv6 (T19740)Debug(10888): 11/18/20 16:43:27:901 StopCaptivePortalDetection() captive portal detection is in progress (T29708)Debug(5006): 11/18/20 16:43:27:901 CaptivePortalDetectionThread: IsDetectingCaptivePortal=0, PreLoginIsDone=1 (T29708)Debug(4983): 11/18/20 16:43:27:901 CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. (T19740)Debug(3590): 11/18/20 16:43:27:901 Pre-login response is Success false yes Enter login credentials Username Password 1GB (T19740)Debug(3606): 11/18/20 16:43:27:901 REGION-PRIO, gateway region code is GB (T19740)Debug(3638): 11/18/20 16:43:27:901 REGION-PRIO, portal and gateway have same region code! (T19740)Debug(6348): 11/18/20 16:43:27:901 Auth message is Enter login credentials for gateway vpn.acmecompany.com (T19740)Debug(6376): 11/18/20 16:43:27:901 Gateway license yes, license-v6 yes (T19740)Debug(3865): 11/18/20 16:43:27:901 ----Gateway Login starts---- (T19740)Debug(11042): 11/18/20 16:43:27:901 Set to service bUseCCUserGateway 0 and ccUserNameGateway (T19740)Debug(2148): 11/18/20 16:43:27:901 Update user name from to username1 (T19740)Debug(5948): 11/18/20 16:43:27:901 OtpSaveCredential is save_username (T19740)Debug(5986): 11/18/20 16:43:27:901 External network gateway without OTP authentication (T19740)Debug(6043): 11/18/20 16:43:27:901 Need to prompt user enter gateway credential. Set dpgc to true. (T19740)Debug( 41): 11/18/20 16:43:27:901 Roaming profile is false (T19740)Debug( 167): 11/18/20 16:43:27:909 profileInfo username User1, profile path (null), server (null) (T19740)Debug(2004): 11/18/20 16:43:27:915 Unserialized non-empty cookie for portal vpn.acmecompany.com and user username1 (T19740)Debug(1933): 11/18/20 16:43:27:916 Unserialized empty cookie for portal vpn.acmecompany.com and pre-logon user. (T19740)Debug(3921): 11/18/20 16:43:27:916 Auth cookie is not empty for user username1. Reset bDPGC flag. (T19740)Debug(3924): 11/18/20 16:43:27:916 bIsEmptyUser is 0, bDPGCforManualOnlyGateway is 0, bDPGCNotforManualOnlyGateway is 0 (T19740)Debug(3961): 11/18/20 16:43:27:916 2FA with cookie. (T19740)Debug(11042): 11/18/20 16:43:27:916 Set to service bUseCCUserGateway 0 and ccUserNameGateway (T19740)Debug(3996): 11/18/20 16:43:27:916 m_nEncryptedPasswordLen is 0 (T19740)Debug( 41): 11/18/20 16:43:27:916 Roaming profile is false (T19740)Debug( 167): 11/18/20 16:43:27:925 profileInfo username User1, profile path (null), server (null) (T19740)Debug(2004): 11/18/20 16:43:27:931 Unserialized non-empty cookie for portal vpn.acmecompany.com and user username1 (T19740)Debug(1933): 11/18/20 16:43:27:931 Unserialized empty cookie for portal vpn.acmecompany.com and pre-logon user. (T19740)Debug(7021): 11/18/20 16:43:27:931 use cached deviceSN (T19740)Debug(5748): 11/18/20 16:43:27:932 Get preferred IPv4 88.88.8.88 for gateway 888.88.888.888 and user username1 (T19740)Debug(5779): 11/18/20 16:43:27:932 Get preferred IPv6 for gateway 888.88.888.888 and user username1 (T19740)Debug(4074): 11/18/20 16:43:27:932 Actual user for gateway login is username1 (T19740)Debug(4078): 11/18/20 16:43:27:932 Gateway selection type is auto (T19740)Debug(7021): 11/18/20 16:43:27:932 use cached deviceSN (T19740)Debug(10856): 11/18/20 16:43:27:932 Need to check gateway cert for vpn.acmecompany.com (T19740)Debug(2646): 11/18/20 16:43:27:932 encpostdata, encpostdata=00000243D39189A0, encpostdatalen=896 (T19740)Debug(2815): 11/18/20 16:43:27:932 REQID=52,IPADDR=vpn.acmecompany.com,PORT=443,URL=/ssl-vpn/login.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T19740)Debug(1600): 11/18/20 16:43:28:002 Send response to client for request https_request (T19740)Debug(2925): 11/18/20 16:43:28:114 receive pan_msg_ping, 3 (T19740)Debug(2018): 11/18/20 16:43:28:123 Serialize non-empty cookie for portal vpn.acmecompany.com and user username1 (T19740)Debug( 41): 11/18/20 16:43:28:123 Roaming profile is false (T19740)Debug( 167): 11/18/20 16:43:28:133 profileInfo username User1, profile path (null), server (null) (T19740)Debug(2110): 11/18/20 16:43:28:141 Serialized portal user auth cookie to file C:\Users\User1\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_a3d3cc5f2d548f56907d161ed1752f.dat. 614 bytes. (T19740)Debug(1901): 11/18/20 16:43:28:141 Serialize empty cookie for portal vpn.acmecompany.com and pre-logon user (T19740)Debug(1908): 11/18/20 16:43:28:142 SerializePortalPrelogonAuthCookie to file PanPPAC_e8da482c86e266d391d244873eb9120.dat (T19740)Debug(4503): 11/18/20 16:43:28:142 Gateway vpn.acmecompany.com has hip-report-version: 4 (T19740)Debug(4518): 11/18/20 16:43:28:142 Managed is unknown (T19740)Debug(4522): 11/18/20 16:43:28:142 Gateway vpn.acmecompany.com's location is (T19740)Debug(11028): 11/18/20 16:43:28:142 NetworkDisoverEventSet is no, RedoNetworkDiscovery is no (T19740)Debug(2590): 11/18/20 16:43:28:142 ----Tunnel creation starts---- (T19740)Debug(2591): 11/18/20 16:43:28:142 Try to create tunnel with gateway vpn.acmecompany.com (T19740)Debug(6598): 11/18/20 16:43:28:142 --Set state to Connecting... (T19740)Debug(1052): 11/18/20 16:43:28:142 Display hip report V4 on the UI (T19740)Debug(2413): 11/18/20 16:43:28:142 proxy , proxyuser , domain acmecompany.com, user username1, remotehost 888.88.888.888. (T19740)Debug(7021): 11/18/20 16:43:28:142 use cached deviceSN (T19740)Debug(2743): 11/18/20 16:43:28:154 Get gateway config. (T19740)Debug(10856): 11/18/20 16:43:28:154 Need to check gateway cert for vpn.acmecompany.com (T19740)Debug(2646): 11/18/20 16:43:28:154 encpostdata, encpostdata=00000243D30810B0, encpostdatalen=464 (T19740)Debug(2815): 11/18/20 16:43:28:154 REQID=53,IPADDR=vpn.acmecompany.com,PORT=443,URL=/ssl-vpn/getconfig.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T19740)Debug(1600): 11/18/20 16:43:28:224 Send response to client for request https_request (T19740)Debug(2925): 11/18/20 16:43:28:302 receive pan_msg_ping, 1 (T19740)Debug(2810): 11/18/20 16:43:28:303 gateway vpn.acmecompany.com's config is yes /ssl-tunnel-connect.sslvpn ACME-VPN-N username1 2073600 43200 10800 1000 1000 888.88.888.888 88.88.8.88 255.255.255.255 yes 888.88.8.1 acmecompany.com 88.88.8.88 0 no 10.0.0.0/8 888.88.0.0/12 192.168.0.0/16 4501 esp-tunnel aes-128-cbc sha1 (T19740)Debug(2837): 11/18/20 16:43:28:303 There is no connected-gw-ip (T19740)Debug(4587): 11/18/20 16:43:28:303 In SetGatewayRoute: The original route table: (T19740)Debug( 138): 11/18/20 16:43:28:304 Destination NetMask Gateway Inf Metric (T19740)Debug( 153): 11/18/20 16:43:28:304 0.0.0.0 0.0.0.0 192.168.100.1 33 25 (T19740)Debug( 153): 11/18/20 16:43:28:304 127.0.0.0 255.0.0.0 127.0.0.1 1 331 (T19740)Debug( 153): 11/18/20 16:43:28:304 127.0.0.1 255.255.255.255 127.0.0.1 1 331 (T19740)Debug( 153): 11/18/20 16:43:28:304 127.255.255.255 255.255.255.255 127.0.0.1 1 331 (T19740)Debug( 153): 11/18/20 16:43:28:304 888.88.88.0 255.255.240.0 888.88.88.1 49 271 (T19740)Debug( 153): 11/18/20 16:43:28:304 888.88.88.1 255.255.255.255 888.88.88.1 49 271 (T19740)Debug( 153): 11/18/20 16:43:28:304 888.88.88.255 255.255.255.255 888.88.88.1 49 271 (T19740)Debug( 153): 11/18/20 16:43:28:304 192.168.100.0 255.255.255.0 192.168.100.100 33 281 (T19740)Debug( 153): 11/18/20 16:43:28:304 192.168.100.100 255.255.255.255 192.168.100.100 33 281 (T19740)Debug( 153): 11/18/20 16:43:28:304 192.168.100.255 255.255.255.255 192.168.100.100 33 281 (T19740)Debug( 153): 11/18/20 16:43:28:304 224.0.0.0 240.0.0.0 127.0.0.1 1 331 (T19740)Debug( 153): 11/18/20 16:43:28:304 224.0.0.0 240.0.0.0 192.168.100.100 33 281 (T19740)Debug( 153): 11/18/20 16:43:28:304 224.0.0.0 240.0.0.0 888.88.88.1 49 271 (T19740)Debug( 153): 11/18/20 16:43:28:304 255.255.255.255 255.255.255.255 127.0.0.1 1 331 (T19740)Debug( 153): 11/18/20 16:43:28:304 255.255.255.255 255.255.255.255 192.168.100.100 33 281 (T19740)Debug( 153): 11/18/20 16:43:28:304 255.255.255.255 255.255.255.255 888.88.88.1 49 271 (T19740)Debug(4597): 11/18/20 16:43:28:304 SetGatewayRoute: GetBestRoute() returns Dest:0.0.0.0 Mask:0.0.0.0 if_index=33 metric1=25 (T19740)Debug(4618): 11/18/20 16:43:28:304 Created gateway route (888.88.888.888) succeeds (T19740)Debug( 218): 11/18/20 16:43:28:304 set virtual interface driver started as yes (T19740)Debug( 275): 11/18/20 16:43:28:304 Ipv6-connection is NULL (T19740)Debug(13272): 11/18/20 16:43:28:304 Quarantine status is alreUser1 no (T19740)Debug( 327): 11/18/20 16:43:28:304 gw-address-v6 is not specified (T19740)Debug( 333): 11/18/20 16:43:28:304 remoteHostV6 is not specified (T19740)Debug( 358): 11/18/20 16:43:28:304 ip-address-preferred value is yes (T19740)Debug( 383): 11/18/20 16:43:28:304 ip-address-v6-preferred not found. (T19740)Debug(10557): 11/18/20 16:43:28:304 Set preferred IP 88.88.8.88 for gateway 888.88.888.888 user username1 (T19740)Debug(10566): 11/18/20 16:43:28:305 Set preferred IPv6 for gateway 888.88.888.888 user username1 (T19740)Debug( 527): 11/18/20 16:43:28:305 DLSA, found no-direct-access-to-local-network tag, b_IsDLSASet set to false (T19740)Debug( 764): 11/18/20 16:43:28:305 Encryption method is aes-128-cbc (T19740)Debug(3216): 11/18/20 16:43:28:305 set driver connected as true (T19740)Debug(9531): 11/18/20 16:43:28:305 Failed to get ssl-only-selection from config, try local (T19740)Debug( 622): 11/18/20 16:43:28:305 use-ssl-only-tunnel is not configured and user cannnot change (T19740)Debug( 152): 11/18/20 16:43:28:305 disconnect-on-idle timeout is 10800 (T19740)Debug( 162): 11/18/20 16:43:28:305 VPN idle timeout is 10800; config timeout is 43200 (T19740)Debug( 72): 11/18/20 16:43:28:305 c2s-spi is 0x7EFAEAC0, s2c-spi is 0x98D66018 (T19740)Debug( 210): 11/18/20 16:43:28:305 EnforceDns is enabled, set 1 GP pushed DNS servers (T19740)Debug( 166): 11/18/20 16:43:28:305 Trying to do ipsec connection to 888.88.888.888[4501] (T19740)Debug( 487): 11/18/20 16:43:28:305 socket send buffer old size is 65536 (T19740)Debug( 511): 11/18/20 16:43:28:305 socket send buffer new size is 3145728 (T19740)Debug( 559): 11/18/20 16:43:28:318 Network is reachable (T19740)Info ( 178): 11/18/20 16:43:28:320 Connected to: 888.88.888.888[4501], Sending keep alive to ipsec socket... (T19740)Info ( 216): 11/18/20 16:43:28:341 Connected ipsec to 888.88.888.888(4501) (T19740)Info ( 356): 11/18/20 16:43:28:341 tunnel to 888.88.888.888 connected (T19740)Debug( 376): 11/18/20 16:43:28:576 PsvRegister done (T19740)Debug( 25): 11/18/20 16:43:28:576 create thread 0x960 with thread ID 29364 (T19740)Debug( 115): 11/18/20 16:43:28:576 SPInit (T19740)Debug(1441): 11/18/20 16:43:28:576 ST,got install-driver (T19740)Debug(2704): 11/18/20 16:43:28:576 ST,CreateCommandCache, gCachedCommands = 0000000000000000, gCachedCommandsNumber=0 (T29364)Debug( 425): 11/18/20 16:43:28:576 VpnProcMonitor thread starts (T29364)Debug( 489): 11/18/20 16:43:28:576 New ProcMon thread priority 2 (T29364)Debug( 25): 11/18/20 16:43:28:576 create thread 0x948 with thread ID 31928 (T19740)Debug(2417): 11/18/20 16:43:28:576 ST,OpenServiceW return valid value, driver alreUser1 installed (T29364)Debug( 25): 11/18/20 16:43:28:576 create thread 0x904 with thread ID 21404 (T29364)Debug(9531): 11/18/20 16:43:28:576 Failed to get ipsec-failover-ssl from config, try local (T19740)Debug(2427): 11/18/20 16:43:28:576 ST,IsDriverInstalled return 1 (T31928)Debug( 436): 11/18/20 16:43:28:576 VpnProcDrv thread starts (T31928)Debug( 921): 11/18/20 16:43:28:576 New ProcDrv thread priority 2 (T21404)Debug( 450): 11/18/20 16:43:28:576 VpnProcTunnel thread starts (T21404)Debug(1001): 11/18/20 16:43:28:576 New ProcTunnel thread priority 2 (T19740)Debug(2138): 11/18/20 16:43:28:577 ST,service status is 00000001, ret = 1 (T19740)Debug(2148): 11/18/20 16:43:28:583 ST,Service started status = 1. (T19740)Debug( 883): 11/18/20 16:43:28:584 SP init is called (T19740)Debug(1298): 11/18/20 16:43:28:584 ST,ipv4 and ipv6 address is NULL, do not set ipv4 and ipv6 address (T5008)Debug(3058): 11/18/20 16:43:28:584 ST,start gp filter reader (T19740)Debug( 203): 11/18/20 16:43:28:584 number of entries processed in hosts file: 1 (T19740)Debug(1124): 11/18/20 16:43:28:584 SPInit parsed 0 entries from hosts file (T19740)Debug(1651): 11/18/20 16:43:28:599 Get original UseDomainNameDevolution value 1 (T19740)Debug(1677): 11/18/20 16:43:28:599 Get original DNS SearchList value acmecompany.com (T19740)Debug(1698): 11/18/20 16:43:28:599 searchList: acmecompany.com (T19740)Debug(1139): 11/18/20 16:43:28:640 Save original dns suffix to registry (T19740)Debug(1230): 11/18/20 16:43:28:640 domainsuffix, set dns suffix search order (T19740)Debug(2908): 11/18/20 16:43:28:662 Virtual adapter friendly name is: Ethernet 3, mtu is 1400 (T19740)Debug(3311): 11/18/20 16:43:28:668 Set interfaceMetric to 1. (T19740)Info (3491): 11/18/20 16:43:28:668 ipv4 address nochange, DNS address nochange. (T19740)Debug( 252): 11/18/20 16:43:28:701 Start tunnel driver. (T31296)Debug(6153): 11/18/20 16:43:28:718 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T19740)Debug( 379): 11/18/20 16:43:28:726 SetIpManually takes 79ms. (T19740)Debug( 132): 11/18/20 16:43:28:761 sp start called, do nothing beacuse service will be start on demand (T19740)Debug(1138): 11/18/20 16:43:28:761 SPStart is called (tunnel is not in retry mode) (T19740)Debug(1459): 11/18/20 16:43:28:761 Cannot get local ipv6: No error (T19740)Debug(1162): 11/18/20 16:43:28:761 call SPSetParameters to set interface addresses, physical: 192.168.100.100-:: virtual: 88.88.8.88-:: (T19740)Debug(2466): 11/18/20 16:43:28:761 ST,phyIp = 192.168.100.100, vaIp = 88.88.8.88, phyIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000, vaIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000 (T19740)Debug( 430): 11/18/20 16:43:28:782 Check IP Set takes 15ms. (T19740)Debug(2290): 11/18/20 16:43:28:782 SetExcludeRoutesV6: there is no route to set (T19740)Debug( 447): 11/18/20 16:43:28:782 Set IPv6 excl route takes 0ms. (T19740)Debug(2208): 11/18/20 16:43:28:782 SetExcludeRoutes: there is no route to set (T19740)Debug( 459): 11/18/20 16:43:28:782 Set IPv4 excl route takes 0ms. (T19740)Debug(3903): 11/18/20 16:43:28:782 Wait for virtual interface IP route entry 88.88.8.88 (T19740)Debug(3917): 11/18/20 16:43:32:171 Found virtual interface IP route entry. (T19740)Debug(2095): 11/18/20 16:43:32:186 Set access route: ForwardDest = 10.0.0.0, metric 1. (T19740)Debug(2095): 11/18/20 16:43:32:202 Set access route: ForwardDest = 888.88.0.0, metric 1. (T19740)Debug(2095): 11/18/20 16:43:32:217 Set access route: ForwardDest = 192.168.0.0, metric 1. (T19740)Debug(5088): 11/18/20 16:43:32:217 DLSAV6, CPanNetSetup::RemoveDLSARouteV6, cfg=00000243D37F4EC0 (T19740)Debug(5113): 11/18/20 16:43:32:217 DLSAV6, our IF index=2, number of defined route is 0, number of routes is 9 (T19740)Debug(5153): 11/18/20 16:43:32:217 DLSAV6, remove previous DLSA success (T19740)Debug(5169): 11/18/20 16:43:32:217 DLSA, RemoveDLSARoute, cfg=00000243D37F4EC0 (T19740)Debug(5190): 11/18/20 16:43:32:217 DLSA, our IF index=2 (T19740)Debug( 25): 11/18/20 16:43:32:217 create thread 0x728 with thread ID 24116 (T19740)Debug(2121): 11/18/20 16:43:32:217 Start FlushDNSCache thread 0x728 (T19740)Debug( 515): 11/18/20 16:43:32:217 Save route table snapshot... (T19740)Debug( 645): 11/18/20 16:43:32:217 ipsec connect(888.88.888.888) succeed (T19740)Debug(10521): 11/18/20 16:43:32:217 VPN tunnel is connected. (T19740)Debug(10525): 11/18/20 16:43:32:217 Enable life time and create life time thread. (T19740)Debug( 25): 11/18/20 16:43:32:217 create thread 0x728 with thread ID 35908 (T19740)Debug(6598): 11/18/20 16:43:32:217 --Set state to Connected (T19740)Debug(1052): 11/18/20 16:43:32:217 Display hip report V4 on the UI (T19740)Debug(10788): 11/18/20 16:43:32:217 SetVpnStatus called with new status=1, Previous Status=0 (T19740)Debug(4101): 11/18/20 16:43:32:217 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T19740)Debug(2604): 11/18/20 16:43:32:233 Tunnel is created with the gateway vpn.acmecompany.com (T19740)Debug(1594): 11/18/20 16:43:32:233 Refresh proxy (T35908)Debug(4104): 11/18/20 16:43:32:236 LifeTimeThread starts (T24116)Debug(2140): 11/18/20 16:43:34:240 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "44" (T19740)Debug(2550): 11/18/20 16:43:37:243 keepalive echo back timeout or failed. (T19740)Debug(2560): 11/18/20 16:43:37:243 latency: pre=21, post=-1, needToReport=1 (T19740)Debug(2633): 11/18/20 16:43:37:243 tunnel to vpn.acmecompany.com is created. (T19740)Debug(5529): 11/18/20 16:43:37:243 NetworkDiscoverThread: SetEvent network discover reUser1 event for external network discovery. (T19740)Debug( 555): 11/18/20 16:43:37:243 Reset hip report quit event (T19740)Debug( 567): 11/18/20 16:43:37:243 pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\dalog.dat (T19740)Debug(10788): 11/18/20 16:43:37:243 SetVpnStatus called with new status=1, Previous Status=1 (T19740)Debug(4101): 11/18/20 16:43:37:243 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T19740)Debug(5604): 11/18/20 16:43:37:243 NetworkDiscoverThread: PortalStatus is 1, HasLoggedOnGateway is 1 (T19740)Debug(5722): 11/18/20 16:43:37:243 Reset NetworkDiscovery waitTime to 5 seconds. (T19740)Debug(5225): 11/18/20 16:43:37:243 NetworkDiscoverThread: wait for network discover event. (T31296)Debug(4022): 11/18/20 16:43:37:243 Found virtual IP route entry (T31296)Debug(4773): 11/18/20 16:43:37:243 No change for gateway route (T31296)Debug(6214): 11/18/20 16:43:40:252 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 1, IsVPNInRetry() is 0. (T31296)Debug(4022): 11/18/20 16:43:40:252 Found virtual IP route entry (T31296)Debug(4773): 11/18/20 16:43:40:252 No change for gateway route (T31296)Debug(6231): 11/18/20 16:43:40:252 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (T31296)Debug(3903): 11/18/20 16:43:40:252 Wait for virtual interface IP route entry 88.88.8.88 (T31296)Debug(3917): 11/18/20 16:43:40:252 Found virtual interface IP route entry. (T31296)Debug(2073): 11/18/20 16:43:40:252 number of route is 3 (T31296)Debug(2091): 11/18/20 16:43:40:252 Set route successfully. ForwardDest = 10.0.0.0, metric 1. (T31296)Debug(2091): 11/18/20 16:43:40:252 Set route successfully. ForwardDest = 888.88.0.0, metric 1. (T31296)Debug(2091): 11/18/20 16:43:40:267 Set route successfully. ForwardDest = 192.168.0.0, metric 1. (T5304)Debug( 139): 11/18/20 16:43:52:789 Got hip report in other process reUser1 event. (T5304)Debug( 158): 11/18/20 16:43:52:789 Read output from PanGpHip.exe (T5304)Debug( 195): 11/18/20 16:43:52:789 write hip file now (T5304)Debug( 221): 11/18/20 16:43:52:789 CheckHipInOtherProcess() sets hip report reUser1 event. (T5304)Debug( 135): 11/18/20 16:43:52:789 Wait for the reUser1 event of hip report generated in other process. (T7180)Debug(5805): 11/18/20 16:43:52:789 HipReportThread: got HIP report reUser1 event. (T7180)Debug(5821): 11/18/20 16:43:52:789 HipReportThread: wait for network discover reUser1 event. (T7180)Debug(5826): 11/18/20 16:43:52:789 HipReportThread: got network discover reUser1 event. (T7180)Debug(7021): 11/18/20 16:43:52:805 use cached deviceSN (T7180)Debug(5906): 11/18/20 16:43:52:805 Sending hip report delay max registry setting is -1 seconds (T7180)Debug(5908): 11/18/20 16:43:52:805 Set max sending hip report delay to default 1800 seconds (T7180)Debug(5924): 11/18/20 16:43:52:805 v3 hip report is encoded (T7180)Debug(5939): 11/18/20 16:43:52:805 v4 hip report is encoded (T7180)Debug(5962): 11/18/20 16:43:52:805 HIP report v3 md5 digest is 669a4c7f3375ad554a3b429af3c4d42 (T7180)Debug(5994): 11/18/20 16:43:52:805 HIP report v4 md5 digest is cb7f36b9813faac4db3ac894c24c772 (T7180)Debug(6022): 11/18/20 16:43:52:805 HipReportThread: network type is external network. (T7180)Debug(1663): 11/18/20 16:43:52:805 Send v4 hip report to gateway vpn.acmecompany.com (T7180)Debug(4777): 11/18/20 16:43:52:805 Entering SendHipReportToGateway(). Gateway: vpn.acmecompany.com (T7180)Debug( 799): 11/18/20 16:43:52:805 m_bScheduleFlag is 0 (T7180)Debug( 809): 11/18/20 16:43:52:805 m_bScheduleFlag is set to 1 (T7180)Debug(4802): 11/18/20 16:43:52:805 Gateway vpn.acmecompany.com: now is 1605717832, next hip checking is 0, next hip report check sending time is 0, last hip report check sending time is 0, sending hip delay is 0 ms (T7180)Debug(4819): 11/18/20 16:43:52:805 Wait for 0 ms to send hip report check to gateway vpn.acmecompany.com (T7180)Debug(4832): 11/18/20 16:43:52:805 Time to send hip report to gateway vpn.acmecompany.com (T7180)Debug(2969): 11/18/20 16:43:52:805 Gateway: vpn.acmecompany.com, client IP: 192.168.100.100 (T7180)Debug(4849): 11/18/20 16:43:52:806 Hip report head to gateway vpn.acmecompany.com is cb7f36b9813faac4db3ac894c24c772 username1 HOST-PC dd9a58de-cc30-4248-a308-f27aeb476dba 88.88.8.88 </ (T7180)Debug(4999): 11/18/20 16:43:52:806 SendHipReportNReceive() (T7180)Debug(5021): 11/18/20 16:43:52:806 bUseCCUser=0, ccUserName=, m_userName=username1 (T7180)Debug(5030): 11/18/20 16:43:52:806 latency report data=&pretunnellatency=21ms&posttunnellatency=-1ms (T7180)Debug(5035): 11/18/20 16:43:52:806 using https to send hip report check to gateway vpn.acmecompany.com (T7180)Debug(7021): 11/18/20 16:43:52:806 use cached deviceSN (T7180)Debug(5077): 11/18/20 16:43:52:806 Network discover SN 83 remains same. (T7180)Debug( 780): 11/18/20 16:43:52:806 SSL connecting to 888.88.888.888 (T7180)Debug( 559): 11/18/20 16:43:52:815 Network is reachable (T7180)Debug(4520): 11/18/20 16:43:52:883 SSL verify succeed (T7180)Debug(1323): 11/18/20 16:43:52:964 OpenSSL alert write:warning:close notify (T7180)Debug(5090): 11/18/20 16:43:52:964 Gateway vpn.acmecompany.com, response to the hip report check: yes 0 (T7180)Info (5092): 11/18/20 16:43:52:964 sent HIP report check to vpn.acmecompany.com. (T7180)Debug(5120): 11/18/20 16:43:52:964 Response status of HIP report check is success, gateway vpn.acmecompany.com (T7180)Debug(5122): 11/18/20 16:43:52:964 Hip report check returns success. (T7180)Debug(4863): 11/18/20 16:43:52:964 SendHipReportNReceive returns TRUE for gateway vpn.acmecompany.com (T7180)Debug(4877): 11/18/20 16:43:52:964 Hip notification is empty in the HIP report check response from gateway vpn.acmecompany.com (T7180)Info (4897): 11/18/20 16:43:52:964 Hip report is needed for gateway vpn.acmecompany.com. (T7180)Info (4910): 11/18/20 16:43:52:964 Send hip report to gateway vpn.acmecompany.com. (T7180)Debug(4999): 11/18/20 16:43:52:964 SendHipReportNReceive() (T7180)Debug(5021): 11/18/20 16:43:52:964 bUseCCUser=0, ccUserName=, m_userName=username1 (T7180)Debug(5035): 11/18/20 16:43:52:964 using https to send hip report to gateway vpn.acmecompany.com (T7180)Debug(7021): 11/18/20 16:43:52:964 use cached deviceSN (T7180)Debug(5077): 11/18/20 16:43:52:964 Network discover SN 83 remains same. (T7180)Debug( 780): 11/18/20 16:43:52:965 SSL connecting to 888.88.888.888 (T7180)Debug( 559): 11/18/20 16:43:52:972 Network is reachable (T7180)Debug(4520): 11/18/20 16:43:53:049 SSL verify succeed (T7180)Debug(1323): 11/18/20 16:43:53:222 OpenSSL alert write:warning:close notify (T7180)Debug(5090): 11/18/20 16:43:53:222 Gateway vpn.acmecompany.com, response to the hip report : (T7180)Info (5092): 11/18/20 16:43:53:222 sent HIP report to vpn.acmecompany.com. (T7180)Debug(5120): 11/18/20 16:43:53:223 Response status of HIP report is success, gateway vpn.acmecompany.com (T7180)Debug(5122): 11/18/20 16:43:53:223 Hip report returns success. (T7180)Info (4913): 11/18/20 16:43:53:223 Got hip notification from gateway vpn.acmecompany.com. (T7180)Debug(4921): 11/18/20 16:43:53:223 Hip notification is empty in the HIP report check response from gateway vpn.acmecompany.com (T7180)Debug(4930): 11/18/20 16:43:53:223 SSL is disconnected. Returns TRUE. (T7180)Debug(1665): 11/18/20 16:43:53:223 SendHipReportToGateway vpn.acmecompany.com returns TRUE. (T7180)Debug(1052): 11/18/20 16:43:53:223 Display hip report V4 on the UI (T7180)Debug(1061): 11/18/20 16:43:53:254 Hip report changed. Include it in status message to client. (T7180)Debug(5800): 11/18/20 16:43:53:256 HipReportThread: wait for HIP report reUser1 event. (T5304)Debug( 143): 11/18/20 16:43:53:988 Got event for PanGpHip process has quited. (T5304)Debug( 338): 11/18/20 16:43:53:988 CheckHip over (T5304)Debug( 282): 11/18/20 16:43:53:988 Hip checking is not initiated by clicking resubmit host profile. (T5304)Debug( 216): 11/18/20 16:43:53:988 HipCheckThread: wait for hip check event for 3600000 ms); (T29364)Info (1249): 11/18/20 16:44:19:928 --Too many outstanding keepalive and no response from GP gateway, disconnect tunnel (T29364)Debug(1252): 11/18/20 16:44:19:928 Tunnel downtime after keep-alive timeout is 51344 ms (T29364)Info ( 597): 11/18/20 16:44:19:928 VPN timeout due to keepalive, get out of ProcMonitor (T29364)Debug( 607): 11/18/20 16:44:19:928 In timeout handling, tunnel downtime is 51344 miliseconds (T29364)Debug(5471): 11/18/20 16:44:19:929 Show Gateway vpn-kee-hw: Checking network availability and restoring VPN connection when network is available. (T29364)Debug(6598): 11/18/20 16:44:19:929 --Set state to Restoring VPN Connection (T6484)Debug(2358): 11/18/20 16:44:19:929 Setting debug level to 5 (T29364)Debug( 650): 11/18/20 16:44:19:930 Stop ProcDrv before disconnect (T31928)Info ( 930): 11/18/20 16:44:19:930 ProDrv: VPN disconnect event, get out of ProcDrv (T31928)Info ( 959): 11/18/20 16:44:19:930 ProcDrv thread dies (T29364)Info ( 893): 11/18/20 16:44:19:930 ProcDrv quit (T29364)Debug( 655): 11/18/20 16:44:19:930 Stop ProcTunnel before disconnect (T21404)Info (1010): 11/18/20 16:44:19:930 ProTunnel: VPN disconnect event, get out of ProcTunnel (T21404)Info (1026): 11/18/20 16:44:19:930 ProcTunnel thread dies (T29364)Info ( 974): 11/18/20 16:44:19:930 ProcTunnel quit (T29364)Debug( 229): 11/18/20 16:44:19:931 IPSec anti-replay statistics: outside window count 0, replay count 0 (T29364)Debug( 231): 11/18/20 16:44:19:931 Disconnect udp socket (T29364)Debug( 530): 11/18/20 16:44:19:931 unset network (T29364)Debug(2599): 11/18/20 16:44:19:931 Unset 3 routes (T29364)Debug(2619): 11/18/20 16:44:19:931 UnsetRoutes: DeleteIpForwardEntry[0] (10.0.0.0) (T29364)Debug(2619): 11/18/20 16:44:19:931 UnsetRoutes: DeleteIpForwardEntry[1] (888.88.0.0) (T29364)Debug(2619): 11/18/20 16:44:19:931 UnsetRoutes: DeleteIpForwardEntry[2] (192.168.0.0) (T29364)Debug(6074): 11/18/20 16:44:19:931 UnsetGatewayRoutes: DeleteIpForwardEntry(888.88.888.888) (T29364)Info (4654): 11/18/20 16:44:19:932 RemoveGatewayInRouteTable(vnicIdx=2) (T29364)Info (4702): 11/18/20 16:44:19:933 delete 1 ip forward entry: 88.88.8.88 (T29364)Info (4702): 11/18/20 16:44:19:933 delete 2 ip forward entry: 224.0.0.0 (T29364)Info (4702): 11/18/20 16:44:19:933 delete 3 ip forward entry: 255.255.255.255 (T29364)Debug(2558): 11/18/20 16:44:19:933 UnsetRoutesV6: No route installed before (T29364)Debug(1352): 11/18/20 16:44:19:933 Disconnect virtual interface (T31296)Debug(6153): 11/18/20 16:44:20:270 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T31296)Debug(4727): 11/18/20 16:44:20:270 No need to check gateway route since no tunnel. (T29364)Debug( 25): 11/18/20 16:44:20:391 create thread 0x618 with thread ID 20788 (T29364)Debug(1368): 11/18/20 16:44:20:391 Start FlushDNSCache thread 0x618 (T5008)Debug( 529): 11/18/20 16:44:20:398 ST,exit reader set!!!!(T5008)Debug(3061): 11/18/20 16:44:20:398 ST,End gp filter reader (T20788)Debug(2140): 11/18/20 16:44:20:415 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "45" (T29364)Debug(2441): 11/18/20 16:44:20:628 ST,service status is 00000004 (T29364)Debug(2446): 11/18/20 16:44:20:628 ST,service alreUser1 started (T29364)Debug(2449): 11/18/20 16:44:20:926 ST,Service stop send, current status = 00000001.
11-18-2020 09:32 AM
Continuation from previous post
PanGPS.log Part 2 (as it exceeds the 80,000 character limit for posts!)
(T29364)Debug(1172): 11/18/20 16:44:20:926 SPStop is called (T29364)Debug( 784): 11/18/20 16:44:20:942 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(5612): 11/18/20 16:44:20:942 DLSA, savedMetric1Routes not present, do not need to restore (T29364)Debug(5009): 11/18/20 16:44:20:942 Proxy is not disabled before, no need to restore (T29364)Debug( 784): 11/18/20 16:44:20:973 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(1797): 11/18/20 16:44:20:989 UnsetDNSSuffixSearchOrder returns 0 (T29364)Debug( 612): 11/18/20 16:44:21:036 return error code is 84, 00000054 (T29364)Debug(1802): 11/18/20 16:44:21:036 UnsetDNSServerSearchOrder returns 0 (T29364)Debug(1804): 11/18/20 16:44:21:067 UnsetWINSServer returns 84 (T29364)Debug(10788): 11/18/20 16:44:21:067 SetVpnStatus called with new status=0, Previous Status=1 (T29364)Debug(4101): 11/18/20 16:44:21:067 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T29364)Debug( 559): 11/18/20 16:44:21:083 Network is reachable (T29364)Debug( 166): 11/18/20 16:44:21:083 Trying to do ipsec connection to 888.88.888.888[4501] (T29364)Debug( 487): 11/18/20 16:44:21:083 socket send buffer old size is 65536 (T29364)Debug( 511): 11/18/20 16:44:21:083 socket send buffer new size is 3145728 (T29364)Debug( 559): 11/18/20 16:44:21:098 Network is reachable (T29364)Info ( 178): 11/18/20 16:44:21:098 Connected to: 888.88.888.888[4501], Sending keep alive to ipsec socket... (T29364)Info ( 216): 11/18/20 16:44:21:114 Connected ipsec to 888.88.888.888(4501) (T29364)Info ( 356): 11/18/20 16:44:21:114 tunnel to 888.88.888.888 connected (T29364)Debug( 376): 11/18/20 16:44:21:286 PsvRegister done (T29364)Debug( 757): 11/18/20 16:44:21:286 Retry start succeeded (T29364)Debug(4587): 11/18/20 16:44:21:286 In SetGatewayRoute: The original route table: (T29364)Debug( 138): 11/18/20 16:44:21:286 Destination NetMask Gateway Inf Metric (T29364)Debug( 153): 11/18/20 16:44:21:286 0.0.0.0 0.0.0.0 192.168.100.1 33 25 (T29364)Debug( 153): 11/18/20 16:44:21:286 127.0.0.0 255.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:44:21:286 127.0.0.1 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:44:21:286 127.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:44:21:286 888.88.88.0 255.255.240.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:44:21:286 888.88.88.1 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:44:21:286 888.88.88.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:44:21:286 192.168.100.0 255.255.255.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:44:21:286 192.168.100.100 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:44:21:286 192.168.100.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:44:21:286 224.0.0.0 240.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:44:21:286 224.0.0.0 240.0.0.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:44:21:286 224.0.0.0 240.0.0.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:44:21:286 255.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:44:21:286 255.255.255.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:44:21:286 255.255.255.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug(4597): 11/18/20 16:44:21:286 SetGatewayRoute: GetBestRoute() returns Dest:0.0.0.0 Mask:0.0.0.0 if_index=33 metric1=25 (T29364)Debug(4618): 11/18/20 16:44:21:286 Created gateway route (888.88.888.888) succeeds (T29364)Debug( 115): 11/18/20 16:44:21:286 SPInit (T29364)Debug(1441): 11/18/20 16:44:21:286 ST,got install-driver (T29364)Debug(2704): 11/18/20 16:44:21:286 ST,CreateCommandCache, gCachedCommands = 0000000000000000, gCachedCommandsNumber=0 (T29364)Debug(2417): 11/18/20 16:44:21:286 ST,OpenServiceW return valid value, driver alreUser1 installed (T29364)Debug(2427): 11/18/20 16:44:21:286 ST,IsDriverInstalled return 1 (T29364)Debug(2138): 11/18/20 16:44:21:286 ST,service status is 00000001, ret = 1 (T29364)Debug(2148): 11/18/20 16:44:21:286 ST,Service started status = 1. (T29364)Debug( 883): 11/18/20 16:44:21:286 SP init is called (T29364)Debug(1298): 11/18/20 16:44:21:286 ST,ipv4 and ipv6 address is NULL, do not set ipv4 and ipv6 address (T29576)Debug(3058): 11/18/20 16:44:21:286 ST,start gp filter reader (T29364)Debug( 203): 11/18/20 16:44:21:286 number of entries processed in hosts file: 1 (T29364)Debug(1124): 11/18/20 16:44:21:286 SPInit parsed 0 entries from hosts file (T29364)Debug(1651): 11/18/20 16:44:21:317 Get original UseDomainNameDevolution value 1 (T29364)Debug(1677): 11/18/20 16:44:21:317 Get original DNS SearchList value acmecompany.com (T29364)Debug(1698): 11/18/20 16:44:21:317 searchList: acmecompany.com (T29364)Debug(1139): 11/18/20 16:44:21:364 Save original dns suffix to registry (T29364)Debug(1230): 11/18/20 16:44:21:364 domainsuffix, set dns suffix search order (T29364)Debug(2908): 11/18/20 16:44:21:389 Virtual adapter friendly name is: Ethernet 3, mtu is 1400 (T29364)Debug(3311): 11/18/20 16:44:21:396 Set interfaceMetric to 1. (T29364)Info (3491): 11/18/20 16:44:21:396 ipv4 address nochange, DNS address nochange. (T29364)Debug( 252): 11/18/20 16:44:21:430 Start tunnel driver. (T29364)Debug( 379): 11/18/20 16:44:21:430 SetIpManually takes 78ms. (T29364)Error(1304): 11/18/20 16:44:21:462 Failed to find PANGP Virtual interface (T29364)Debug(1472): 11/18/20 16:44:21:462 RenewAddress: cannot get adapter name temporarily (T29364)Debug( 132): 11/18/20 16:44:21:462 sp start called, do nothing beacuse service will be start on demand (T29364)Debug(1138): 11/18/20 16:44:21:462 SPStart is called (tunnel is in retry mode) (T29364)Debug(1459): 11/18/20 16:44:21:462 Cannot get local ipv6: No error (T29364)Debug(1162): 11/18/20 16:44:21:462 call SPSetParameters to set interface addresses, physical: 192.168.100.100-:: virtual: 88.88.8.88-:: (T29364)Debug(2466): 11/18/20 16:44:21:462 ST,phyIp = 192.168.100.100, vaIp = 88.88.8.88, phyIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000, vaIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000 (T29364)Debug( 430): 11/18/20 16:44:21:477 Check IP Set takes 16ms. (T29364)Debug(2290): 11/18/20 16:44:21:477 SetExcludeRoutesV6: there is no route to set (T29364)Debug( 447): 11/18/20 16:44:21:477 Set IPv6 excl route takes 0ms. (T29364)Debug(2208): 11/18/20 16:44:21:477 SetExcludeRoutes: there is no route to set (T29364)Debug( 459): 11/18/20 16:44:21:477 Set IPv4 excl route takes 0ms. (T29364)Debug(3903): 11/18/20 16:44:21:477 Wait for virtual interface IP route entry 88.88.8.88 (T31296)Debug(6214): 11/18/20 16:44:23:292 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 1, IsVPNInRetry() is 0. (T29364)Debug(3917): 11/18/20 16:44:24:630 Found virtual interface IP route entry. (T29364)Debug(2095): 11/18/20 16:44:24:682 Set access route: ForwardDest = 10.0.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:44:24:720 Set access route: ForwardDest = 888.88.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:44:24:727 Set access route: ForwardDest = 192.168.0.0, metric 1. (T29364)Debug(5088): 11/18/20 16:44:24:728 DLSAV6, CPanNetSetup::RemoveDLSARouteV6, cfg=00000243D37F4EC0 (T29364)Debug(5113): 11/18/20 16:44:24:731 DLSAV6, our IF index=2, number of defined route is 0, number of routes is 11 (T29364)Debug(5153): 11/18/20 16:44:24:731 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:44:24:731 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:44:24:731 DLSAV6, remove previous DLSA success (T29364)Debug(5169): 11/18/20 16:44:24:731 DLSA, RemoveDLSARoute, cfg=00000243D37F4EC0 (T29364)Debug(5190): 11/18/20 16:44:24:735 DLSA, our IF index=2 (T29364)Debug( 25): 11/18/20 16:44:24:735 create thread 0x9bc with thread ID 16088 (T29364)Debug(2121): 11/18/20 16:44:24:735 Start FlushDNSCache thread 0x9bc (T29364)Debug( 515): 11/18/20 16:44:24:735 Save route table snapshot... (T31296)Debug(4001): 11/18/20 16:44:24:735 No need to check virtual IP route before SetupNetwork finished (T31296)Debug(4773): 11/18/20 16:44:24:735 No change for gateway route (T31296)Debug(6231): 11/18/20 16:44:24:735 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (T29364)Debug( 788): 11/18/20 16:44:24:736 Retry finished SetupNetwork (T29364)Debug( 25): 11/18/20 16:44:24:736 create thread 0x9bc with thread ID 28052 (T29364)Debug( 25): 11/18/20 16:44:24:736 create thread 0x9a0 with thread ID 22968 (T29364)Debug(6598): 11/18/20 16:44:24:736 --Set state to Connected (T28052)Debug( 436): 11/18/20 16:44:24:736 VpnProcDrv thread starts (T28052)Debug( 921): 11/18/20 16:44:24:736 New ProcDrv thread priority 2 (T29364)Debug(10788): 11/18/20 16:44:24:736 SetVpnStatus called with new status=1, Previous Status=0 (T29364)Debug(4101): 11/18/20 16:44:24:736 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T22968)Debug( 450): 11/18/20 16:44:24:737 VpnProcTunnel thread starts (T22968)Debug(1001): 11/18/20 16:44:24:737 New ProcTunnel thread priority 2 (T6484)Debug(2358): 11/18/20 16:44:24:737 Setting debug level to 5 (T16088)Debug(2140): 11/18/20 16:44:26:738 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "47" (T13964)Debug( 334): 11/18/20 16:45:04:948 PanGpHipMp.exe exit for checking misssing patches. (T13964)Debug( 396): 11/18/20 16:45:04:948 CheckHipMissingPatchInOtherProcess(): exits. (T13964)Debug( 474): 11/18/20 16:45:04:948 Hip missing patch checking duration is 97 (T29364)Info (1249): 11/18/20 16:45:16:199 --Too many outstanding keepalive and no response from GP gateway, disconnect tunnel (T29364)Debug(1252): 11/18/20 16:45:16:199 Tunnel downtime after keep-alive timeout is 51468 ms (T29364)Info ( 597): 11/18/20 16:45:16:199 VPN timeout due to keepalive, get out of ProcMonitor (T29364)Debug( 607): 11/18/20 16:45:16:199 In timeout handling, tunnel downtime is 51468 miliseconds (T29364)Debug(5471): 11/18/20 16:45:16:199 Show Gateway vpn-kee-hw: Checking network availability and restoring VPN connection when network is available. (T29364)Debug(6598): 11/18/20 16:45:16:199 --Set state to Restoring VPN Connection (T6484)Debug(2358): 11/18/20 16:45:16:199 Setting debug level to 5 (T29364)Debug( 650): 11/18/20 16:45:16:199 Stop ProcDrv before disconnect (T28052)Info ( 930): 11/18/20 16:45:16:199 ProDrv: VPN disconnect event, get out of ProcDrv (T28052)Info ( 959): 11/18/20 16:45:16:199 ProcDrv thread dies (T29364)Info ( 893): 11/18/20 16:45:16:199 ProcDrv quit (T29364)Debug( 655): 11/18/20 16:45:16:199 Stop ProcTunnel before disconnect (T22968)Info (1010): 11/18/20 16:45:16:199 ProTunnel: VPN disconnect event, get out of ProcTunnel (T22968)Info (1026): 11/18/20 16:45:16:199 ProcTunnel thread dies (T29364)Info ( 974): 11/18/20 16:45:16:199 ProcTunnel quit (T29364)Debug( 229): 11/18/20 16:45:16:199 IPSec anti-replay statistics: outside window count 0, replay count 0 (T29364)Debug( 231): 11/18/20 16:45:16:199 Disconnect udp socket (T29364)Debug( 530): 11/18/20 16:45:16:199 unset network (T29364)Debug(2599): 11/18/20 16:45:16:199 Unset 3 routes (T29364)Debug(2619): 11/18/20 16:45:16:199 UnsetRoutes: DeleteIpForwardEntry[0] (10.0.0.0) (T29364)Debug(2619): 11/18/20 16:45:16:199 UnsetRoutes: DeleteIpForwardEntry[1] (888.88.0.0) (T29364)Debug(2619): 11/18/20 16:45:16:199 UnsetRoutes: DeleteIpForwardEntry[2] (192.168.0.0) (T29364)Debug(6074): 11/18/20 16:45:16:199 UnsetGatewayRoutes: DeleteIpForwardEntry(888.88.888.888) (T29364)Info (4654): 11/18/20 16:45:16:199 RemoveGatewayInRouteTable(vnicIdx=2) (T29364)Info (4702): 11/18/20 16:45:16:199 delete 1 ip forward entry: 88.88.8.88 (T29364)Info (4702): 11/18/20 16:45:16:199 delete 2 ip forward entry: 224.0.0.0 (T29364)Info (4702): 11/18/20 16:45:16:199 delete 3 ip forward entry: 255.255.255.255 (T29364)Debug(2558): 11/18/20 16:45:16:199 UnsetRoutesV6: No route installed before (T29364)Debug(1352): 11/18/20 16:45:16:199 Disconnect virtual interface (T31296)Debug(6153): 11/18/20 16:45:16:507 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T31296)Debug(4727): 11/18/20 16:45:16:507 No need to check gateway route since no tunnel. (T29364)Debug( 25): 11/18/20 16:45:16:617 create thread 0x7d8 with thread ID 26224 (T29364)Debug(1368): 11/18/20 16:45:16:617 Start FlushDNSCache thread 0x7d8 (T26224)Debug(2140): 11/18/20 16:45:16:617 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "48" (T29576)Debug( 529): 11/18/20 16:45:16:632 ST,exit reader set!!!!(T29576)Debug(3061): 11/18/20 16:45:16:632 ST,End gp filter reader (T29364)Debug(2441): 11/18/20 16:45:16:820 ST,service status is 00000004 (T29364)Debug(2446): 11/18/20 16:45:16:820 ST,service alreUser1 started (T29364)Debug(2449): 11/18/20 16:45:16:991 ST,Service stop send, current status = 00000001. (T29364)Debug(1172): 11/18/20 16:45:16:991 SPStop is called (T29364)Debug( 784): 11/18/20 16:45:17:015 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(5612): 11/18/20 16:45:17:019 DLSA, savedMetric1Routes not present, do not need to restore (T29364)Debug(5009): 11/18/20 16:45:17:019 Proxy is not disabled before, no need to restore (T29364)Debug( 784): 11/18/20 16:45:17:041 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(1797): 11/18/20 16:45:17:061 UnsetDNSSuffixSearchOrder returns 0 (T29364)Debug( 612): 11/18/20 16:45:17:108 return error code is 84, 00000054 (T29364)Debug(1802): 11/18/20 16:45:17:108 UnsetDNSServerSearchOrder returns 0 (T29364)Debug(1804): 11/18/20 16:45:17:145 UnsetWINSServer returns 84 (T29364)Debug(10788): 11/18/20 16:45:17:147 SetVpnStatus called with new status=0, Previous Status=1 (T29364)Debug(4101): 11/18/20 16:45:17:148 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T29364)Debug( 559): 11/18/20 16:45:17:160 Network is reachable (T29364)Debug( 166): 11/18/20 16:45:17:164 Trying to do ipsec connection to 888.88.888.888[4501] (T29364)Debug( 487): 11/18/20 16:45:17:164 socket send buffer old size is 65536 (T29364)Debug( 511): 11/18/20 16:45:17:164 socket send buffer new size is 3145728 (T29364)Debug( 559): 11/18/20 16:45:17:176 Network is reachable (T29364)Info ( 178): 11/18/20 16:45:17:180 Connected to: 888.88.888.888[4501], Sending keep alive to ipsec socket... (T29364)Info ( 216): 11/18/20 16:45:17:200 Connected ipsec to 888.88.888.888(4501) (T29364)Info ( 356): 11/18/20 16:45:17:200 tunnel to 888.88.888.888 connected (T29364)Debug( 376): 11/18/20 16:45:17:349 PsvRegister done (T29364)Debug( 757): 11/18/20 16:45:17:349 Retry start succeeded (T29364)Debug(4587): 11/18/20 16:45:17:349 In SetGatewayRoute: The original route table: (T29364)Debug( 138): 11/18/20 16:45:17:349 Destination NetMask Gateway Inf Metric (T29364)Debug( 153): 11/18/20 16:45:17:349 0.0.0.0 0.0.0.0 192.168.100.1 33 25 (T29364)Debug( 153): 11/18/20 16:45:17:349 127.0.0.0 255.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:45:17:349 127.0.0.1 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:45:17:349 127.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:45:17:349 888.88.88.0 255.255.240.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:45:17:349 888.88.88.1 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:45:17:349 888.88.88.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:45:17:349 192.168.100.0 255.255.255.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:45:17:349 192.168.100.100 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:45:17:349 192.168.100.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:45:17:349 224.0.0.0 240.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:45:17:349 224.0.0.0 240.0.0.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:45:17:349 224.0.0.0 240.0.0.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:45:17:349 255.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:45:17:349 255.255.255.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:45:17:349 255.255.255.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug(4597): 11/18/20 16:45:17:349 SetGatewayRoute: GetBestRoute() returns Dest:0.0.0.0 Mask:0.0.0.0 if_index=33 metric1=25 (T29364)Debug(4618): 11/18/20 16:45:17:349 Created gateway route (888.88.888.888) succeeds (T29364)Debug( 115): 11/18/20 16:45:17:349 SPInit (T29364)Debug(1441): 11/18/20 16:45:17:349 ST,got install-driver (T29364)Debug(2704): 11/18/20 16:45:17:349 ST,CreateCommandCache, gCachedCommands = 0000000000000000, gCachedCommandsNumber=0 (T29364)Debug(2417): 11/18/20 16:45:17:349 ST,OpenServiceW return valid value, driver alreUser1 installed (T29364)Debug(2427): 11/18/20 16:45:17:349 ST,IsDriverInstalled return 1 (T29364)Debug(2138): 11/18/20 16:45:17:349 ST,service status is 00000001, ret = 1 (T29364)Debug(2148): 11/18/20 16:45:17:349 ST,Service started status = 1. (T29364)Debug( 883): 11/18/20 16:45:17:349 SP init is called (T29364)Debug(1298): 11/18/20 16:45:17:349 ST,ipv4 and ipv6 address is NULL, do not set ipv4 and ipv6 address (T29364)Debug( 203): 11/18/20 16:45:17:365 number of entries processed in hosts file: 1 (T29364)Debug(1124): 11/18/20 16:45:17:365 SPInit parsed 0 entries from hosts file (T24736)Debug(3058): 11/18/20 16:45:17:365 ST,start gp filter reader (T29364)Debug(1651): 11/18/20 16:45:17:380 Get original UseDomainNameDevolution value 1 (T29364)Debug(1677): 11/18/20 16:45:17:380 Get original DNS SearchList value acmecompany.com (T29364)Debug(1698): 11/18/20 16:45:17:380 searchList: acmecompany.com (T29364)Debug(1139): 11/18/20 16:45:17:427 Save original dns suffix to registry (T29364)Debug(1230): 11/18/20 16:45:17:427 domainsuffix, set dns suffix search order (T29364)Debug(2908): 11/18/20 16:45:17:443 Virtual adapter friendly name is: Ethernet 3, mtu is 1400 (T29364)Debug(3311): 11/18/20 16:45:17:443 Set interfaceMetric to 1. (T29364)Info (3491): 11/18/20 16:45:17:443 ipv4 address nochange, DNS address nochange. (T29364)Debug( 252): 11/18/20 16:45:17:458 Start tunnel driver. (T29364)Debug( 379): 11/18/20 16:45:17:474 SetIpManually takes 47ms. (T29364)Error(1304): 11/18/20 16:45:17:474 Failed to find PANGP Virtual interface (T29364)Debug(1472): 11/18/20 16:45:17:474 RenewAddress: cannot get adapter name temporarily (T29364)Debug( 132): 11/18/20 16:45:17:474 sp start called, do nothing beacuse service will be start on demand (T29364)Debug(1138): 11/18/20 16:45:17:474 SPStart is called (tunnel is in retry mode) (T29364)Debug(1459): 11/18/20 16:45:17:474 Cannot get local ipv6: No error (T29364)Debug(1162): 11/18/20 16:45:17:474 call SPSetParameters to set interface addresses, physical: 192.168.100.100-:: virtual: 88.88.8.88-:: (T29364)Debug(2466): 11/18/20 16:45:17:474 ST,phyIp = 192.168.100.100, vaIp = 88.88.8.88, phyIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000, vaIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000 (T29364)Debug( 430): 11/18/20 16:45:17:615 Check IP Set takes 141ms. (T29364)Debug(2290): 11/18/20 16:45:17:615 SetExcludeRoutesV6: there is no route to set (T29364)Debug( 447): 11/18/20 16:45:17:615 Set IPv6 excl route takes 0ms. (T29364)Debug(2208): 11/18/20 16:45:17:615 SetExcludeRoutes: there is no route to set (T29364)Debug( 459): 11/18/20 16:45:17:615 Set IPv4 excl route takes 0ms. (T29364)Debug(3903): 11/18/20 16:45:17:615 Wait for virtual interface IP route entry 88.88.8.88 (T31296)Debug(6214): 11/18/20 16:45:19:534 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 1, IsVPNInRetry() is 0. (T29364)Debug(3917): 11/18/20 16:45:20:607 Found virtual interface IP route entry. (T29364)Debug(2095): 11/18/20 16:45:20:669 Set access route: ForwardDest = 10.0.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:45:20:704 Set access route: ForwardDest = 888.88.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:45:20:730 Set access route: ForwardDest = 192.168.0.0, metric 1. (T29364)Debug(5088): 11/18/20 16:45:20:730 DLSAV6, CPanNetSetup::RemoveDLSARouteV6, cfg=00000243D37F4EC0 (T29364)Debug(5113): 11/18/20 16:45:20:736 DLSAV6, our IF index=2, number of defined route is 0, number of routes is 11 (T29364)Debug(5153): 11/18/20 16:45:20:737 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:45:20:737 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:45:20:737 DLSAV6, remove previous DLSA success (T29364)Debug(5169): 11/18/20 16:45:20:737 DLSA, RemoveDLSARoute, cfg=00000243D37F4EC0 (T29364)Debug(5190): 11/18/20 16:45:20:742 DLSA, our IF index=2 (T29364)Debug( 25): 11/18/20 16:45:20:742 create thread 0x7ec with thread ID 5388 (T29364)Debug(2121): 11/18/20 16:45:20:742 Start FlushDNSCache thread 0x7ec (T29364)Debug( 515): 11/18/20 16:45:20:742 Save route table snapshot... (T29364)Debug( 788): 11/18/20 16:45:20:742 Retry finished SetupNetwork (T29364)Debug( 25): 11/18/20 16:45:20:742 create thread 0x7ec with thread ID 17504 (T29364)Debug( 25): 11/18/20 16:45:20:742 create thread 0x8a4 with thread ID 4536 (T29364)Debug(6598): 11/18/20 16:45:20:742 --Set state to Connected (T31296)Debug(4022): 11/18/20 16:45:20:743 Found virtual IP route entry (T31296)Debug(4773): 11/18/20 16:45:20:743 No change for gateway route (T31296)Debug(6231): 11/18/20 16:45:20:743 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (T31296)Debug(3903): 11/18/20 16:45:20:743 Wait for virtual interface IP route entry 88.88.8.88 (T31296)Debug(3917): 11/18/20 16:45:20:743 Found virtual interface IP route entry. (T31296)Debug(2073): 11/18/20 16:45:20:743 number of route is 3 (T17504)Debug( 436): 11/18/20 16:45:20:743 VpnProcDrv thread starts (T17504)Debug( 921): 11/18/20 16:45:20:743 New ProcDrv thread priority 2 (T4536)Debug( 450): 11/18/20 16:45:20:745 VpnProcTunnel thread starts (T4536)Debug(1001): 11/18/20 16:45:20:745 New ProcTunnel thread priority 2 (T31296)Debug(2091): 11/18/20 16:45:20:751 Set route successfully. ForwardDest = 10.0.0.0, metric 1. (T31296)Debug(2091): 11/18/20 16:45:20:758 Set route successfully. ForwardDest = 888.88.0.0, metric 1. (T31296)Debug(2091): 11/18/20 16:45:20:765 Set route successfully. ForwardDest = 192.168.0.0, metric 1. (T6484)Debug(2358): 11/18/20 16:45:20:766 Setting debug level to 5 (T29364)Debug(10788): 11/18/20 16:45:20:766 SetVpnStatus called with new status=1, Previous Status=0 (T29364)Debug(4101): 11/18/20 16:45:20:766 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T5388)Debug(2140): 11/18/20 16:45:22:758 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "50" (T29364)Info (1249): 11/18/20 16:46:12:262 --Too many outstanding keepalive and no response from GP gateway, disconnect tunnel (T29364)Debug(1252): 11/18/20 16:46:12:262 Tunnel downtime after keep-alive timeout is 51500 ms (T29364)Info ( 597): 11/18/20 16:46:12:262 VPN timeout due to keepalive, get out of ProcMonitor (T29364)Debug( 607): 11/18/20 16:46:12:262 In timeout handling, tunnel downtime is 51500 miliseconds (T29364)Debug(5471): 11/18/20 16:46:12:262 Show Gateway vpn-kee-hw: Checking network availability and restoring VPN connection when network is available. (T29364)Debug(6598): 11/18/20 16:46:12:262 --Set state to Restoring VPN Connection (T6484)Debug(2358): 11/18/20 16:46:12:262 Setting debug level to 5 (T29364)Debug( 650): 11/18/20 16:46:12:262 Stop ProcDrv before disconnect (T17504)Info ( 930): 11/18/20 16:46:12:262 ProDrv: VPN disconnect event, get out of ProcDrv (T17504)Info ( 959): 11/18/20 16:46:12:262 ProcDrv thread dies (T29364)Info ( 893): 11/18/20 16:46:12:262 ProcDrv quit (T29364)Debug( 655): 11/18/20 16:46:12:262 Stop ProcTunnel before disconnect (T4536)Info (1010): 11/18/20 16:46:12:262 ProTunnel: VPN disconnect event, get out of ProcTunnel (T4536)Info (1026): 11/18/20 16:46:12:262 ProcTunnel thread dies (T29364)Info ( 974): 11/18/20 16:46:12:262 ProcTunnel quit (T29364)Debug( 229): 11/18/20 16:46:12:262 IPSec anti-replay statistics: outside window count 0, replay count 0 (T29364)Debug( 231): 11/18/20 16:46:12:262 Disconnect udp socket (T29364)Debug( 530): 11/18/20 16:46:12:262 unset network (T29364)Debug(2599): 11/18/20 16:46:12:262 Unset 3 routes (T29364)Debug(2619): 11/18/20 16:46:12:263 UnsetRoutes: DeleteIpForwardEntry[0] (10.0.0.0) (T29364)Debug(2619): 11/18/20 16:46:12:263 UnsetRoutes: DeleteIpForwardEntry[1] (888.88.0.0) (T29364)Debug(2619): 11/18/20 16:46:12:263 UnsetRoutes: DeleteIpForwardEntry[2] (192.168.0.0) (T29364)Debug(6074): 11/18/20 16:46:12:263 UnsetGatewayRoutes: DeleteIpForwardEntry(888.88.888.888) (T29364)Info (4654): 11/18/20 16:46:12:263 RemoveGatewayInRouteTable(vnicIdx=2) (T29364)Info (4702): 11/18/20 16:46:12:263 delete 1 ip forward entry: 88.88.8.88 (T29364)Info (4702): 11/18/20 16:46:12:263 delete 2 ip forward entry: 224.0.0.0 (T29364)Info (4702): 11/18/20 16:46:12:263 delete 3 ip forward entry: 255.255.255.255 (T29364)Debug(2558): 11/18/20 16:46:12:263 UnsetRoutesV6: No route installed before (T29364)Debug(1352): 11/18/20 16:46:12:263 Disconnect virtual interface (T31296)Debug(6153): 11/18/20 16:46:12:572 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T31296)Debug(4727): 11/18/20 16:46:12:572 No need to check gateway route since no tunnel. (T29364)Debug( 25): 11/18/20 16:46:12:710 create thread 0x8e4 with thread ID 15992 (T29364)Debug(1368): 11/18/20 16:46:12:710 Start FlushDNSCache thread 0x8e4 (T15992)Debug(2140): 11/18/20 16:46:12:718 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "51" (T24736)Debug( 529): 11/18/20 16:46:12:720 ST,exit reader set!!!!(T24736)Debug(3061): 11/18/20 16:46:12:720 ST,End gp filter reader (T29364)Debug(2441): 11/18/20 16:46:12:906 ST,service status is 00000004 (T29364)Debug(2446): 11/18/20 16:46:12:906 ST,service alreUser1 started (T29364)Debug(2449): 11/18/20 16:46:13:044 ST,Service stop send, current status = 00000001. (T29364)Debug(1172): 11/18/20 16:46:13:044 SPStop is called (T29364)Debug( 784): 11/18/20 16:46:13:071 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(5612): 11/18/20 16:46:13:076 DLSA, savedMetric1Routes not present, do not need to restore (T29364)Debug(5009): 11/18/20 16:46:13:076 Proxy is not disabled before, no need to restore (T29364)Debug( 784): 11/18/20 16:46:13:104 PreviousDNSInfo doesn't exist, no need to restore (T29364)Debug(1797): 11/18/20 16:46:13:115 UnsetDNSSuffixSearchOrder returns 0 (T29364)Debug( 612): 11/18/20 16:46:13:159 return error code is 84, 00000054 (T29364)Debug(1802): 11/18/20 16:46:13:159 UnsetDNSServerSearchOrder returns 0 (T29364)Debug(1804): 11/18/20 16:46:13:194 UnsetWINSServer returns 84 (T29364)Debug(10788): 11/18/20 16:46:13:194 SetVpnStatus called with new status=0, Previous Status=1 (T29364)Debug(4101): 11/18/20 16:46:13:194 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T29364)Debug( 559): 11/18/20 16:46:13:210 Network is reachable (T29364)Debug( 166): 11/18/20 16:46:13:210 Trying to do ipsec connection to 888.88.888.888[4501] (T29364)Debug( 487): 11/18/20 16:46:13:210 socket send buffer old size is 65536 (T29364)Debug( 511): 11/18/20 16:46:13:210 socket send buffer new size is 3145728 (T29364)Debug( 559): 11/18/20 16:46:13:225 Network is reachable (T29364)Info ( 178): 11/18/20 16:46:13:225 Connected to: 888.88.888.888[4501], Sending keep alive to ipsec socket... (T29364)Info ( 216): 11/18/20 16:46:13:241 Connected ipsec to 888.88.888.888(4501) (T29364)Info ( 356): 11/18/20 16:46:13:241 tunnel to 888.88.888.888 connected (T29364)Debug( 376): 11/18/20 16:46:13:366 PsvRegister done (T29364)Debug( 757): 11/18/20 16:46:13:366 Retry start succeeded (T29364)Debug(4587): 11/18/20 16:46:13:366 In SetGatewayRoute: The original route table: (T29364)Debug( 138): 11/18/20 16:46:13:366 Destination NetMask Gateway Inf Metric (T29364)Debug( 153): 11/18/20 16:46:13:366 0.0.0.0 0.0.0.0 192.168.100.1 33 25 (T29364)Debug( 153): 11/18/20 16:46:13:366 127.0.0.0 255.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:46:13:366 127.0.0.1 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:46:13:366 127.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:46:13:366 888.88.88.0 255.255.240.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:46:13:366 888.88.88.1 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:46:13:366 888.88.88.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:46:13:366 192.168.100.0 255.255.255.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:46:13:366 192.168.100.100 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:46:13:366 192.168.100.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:46:13:366 224.0.0.0 240.0.0.0 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:46:13:366 224.0.0.0 240.0.0.0 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:46:13:366 224.0.0.0 240.0.0.0 888.88.88.1 49 271 (T29364)Debug( 153): 11/18/20 16:46:13:366 255.255.255.255 255.255.255.255 127.0.0.1 1 331 (T29364)Debug( 153): 11/18/20 16:46:13:366 255.255.255.255 255.255.255.255 192.168.100.100 33 281 (T29364)Debug( 153): 11/18/20 16:46:13:366 255.255.255.255 255.255.255.255 888.88.88.1 49 271 (T29364)Debug(4597): 11/18/20 16:46:13:366 SetGatewayRoute: GetBestRoute() returns Dest:0.0.0.0 Mask:0.0.0.0 if_index=33 metric1=25 (T29364)Debug(4618): 11/18/20 16:46:13:366 Created gateway route (888.88.888.888) succeeds (T29364)Debug( 115): 11/18/20 16:46:13:366 SPInit (T29364)Debug(1441): 11/18/20 16:46:13:366 ST,got install-driver (T29364)Debug(2704): 11/18/20 16:46:13:366 ST,CreateCommandCache, gCachedCommands = 0000000000000000, gCachedCommandsNumber=0 (T29364)Debug(2417): 11/18/20 16:46:13:366 ST,OpenServiceW return valid value, driver alreUser1 installed (T29364)Debug(2427): 11/18/20 16:46:13:366 ST,IsDriverInstalled return 1 (T29364)Debug(2138): 11/18/20 16:46:13:366 ST,service status is 00000001, ret = 1 (T29364)Debug(2148): 11/18/20 16:46:13:382 ST,Service started status = 1. (T29364)Debug( 883): 11/18/20 16:46:13:382 SP init is called (T29364)Debug(1298): 11/18/20 16:46:13:382 ST,ipv4 and ipv6 address is NULL, do not set ipv4 and ipv6 address (T152)Debug(3058): 11/18/20 16:46:13:382 ST,start gp filter reader (T29364)Debug( 203): 11/18/20 16:46:13:382 number of entries processed in hosts file: 1 (T29364)Debug(1124): 11/18/20 16:46:13:382 SPInit parsed 0 entries from hosts file (T29364)Debug(1651): 11/18/20 16:46:13:397 Get original UseDomainNameDevolution value 1 (T29364)Debug(1677): 11/18/20 16:46:13:397 Get original DNS SearchList value acmecompany.com (T29364)Debug(1698): 11/18/20 16:46:13:397 searchList: acmecompany.com (T29364)Debug(1139): 11/18/20 16:46:13:444 Save original dns suffix to registry (T29364)Debug(1230): 11/18/20 16:46:13:444 domainsuffix, set dns suffix search order (T29364)Debug(2908): 11/18/20 16:46:13:475 Virtual adapter friendly name is: Ethernet 3, mtu is 1400 (T29364)Debug(3311): 11/18/20 16:46:13:475 Set interfaceMetric to 1. (T29364)Info (3491): 11/18/20 16:46:13:475 ipv4 address nochange, DNS address nochange. (T29364)Debug( 252): 11/18/20 16:46:13:507 Start tunnel driver. (T29364)Debug( 379): 11/18/20 16:46:13:522 SetIpManually takes 62ms. (T29364)Error(1304): 11/18/20 16:46:13:522 Failed to find PANGP Virtual interface (T29364)Debug(1472): 11/18/20 16:46:13:522 RenewAddress: cannot get adapter name temporarily (T29364)Debug( 132): 11/18/20 16:46:13:522 sp start called, do nothing beacuse service will be start on demand (T29364)Debug(1138): 11/18/20 16:46:13:522 SPStart is called (tunnel is in retry mode) (T29364)Debug(1459): 11/18/20 16:46:13:522 Cannot get local ipv6: No error (T29364)Debug(1162): 11/18/20 16:46:13:522 call SPSetParameters to set interface addresses, physical: 192.168.100.100-:: virtual: 88.88.8.88-:: (T29364)Debug(2466): 11/18/20 16:46:13:522 ST,phyIp = 192.168.100.100, vaIp = 88.88.8.88, phyIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000, vaIpV6 = 0000:0000:0000:0000:0000:0000:0000:0000 (T29364)Debug( 430): 11/18/20 16:46:13:538 Check IP Set takes 16ms. (T29364)Debug(2290): 11/18/20 16:46:13:538 SetExcludeRoutesV6: there is no route to set (T29364)Debug( 447): 11/18/20 16:46:13:538 Set IPv6 excl route takes 0ms. (T29364)Debug(2208): 11/18/20 16:46:13:538 SetExcludeRoutes: there is no route to set (T29364)Debug( 459): 11/18/20 16:46:13:538 Set IPv4 excl route takes 0ms. (T29364)Debug(3903): 11/18/20 16:46:13:538 Wait for virtual interface IP route entry 88.88.8.88 (T31296)Debug(6214): 11/18/20 16:46:15:605 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 1, IsVPNInRetry() is 0. (T29364)Debug(3917): 11/18/20 16:46:16:657 Found virtual interface IP route entry. (T29364)Debug(2095): 11/18/20 16:46:16:714 Set access route: ForwardDest = 10.0.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:46:16:737 Set access route: ForwardDest = 888.88.0.0, metric 1. (T29364)Debug(2095): 11/18/20 16:46:16:746 Set access route: ForwardDest = 192.168.0.0, metric 1. (T29364)Debug(5088): 11/18/20 16:46:16:746 DLSAV6, CPanNetSetup::RemoveDLSARouteV6, cfg=00000243D37F4EC0 (T29364)Debug(5113): 11/18/20 16:46:16:751 DLSAV6, our IF index=2, number of defined route is 0, number of routes is 11 (T29364)Debug(5153): 11/18/20 16:46:16:751 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:46:16:751 DLSAV6, remove previous DLSA success (T29364)Debug(5153): 11/18/20 16:46:16:751 DLSAV6, remove previous DLSA success (T29364)Debug(5169): 11/18/20 16:46:16:751 DLSA, RemoveDLSARoute, cfg=00000243D37F4EC0 (T29364)Debug(5190): 11/18/20 16:46:16:755 DLSA, our IF index=2 (T29364)Debug( 25): 11/18/20 16:46:16:755 create thread 0x770 with thread ID 17604 (T29364)Debug(2121): 11/18/20 16:46:16:755 Start FlushDNSCache thread 0x770 (T29364)Debug( 515): 11/18/20 16:46:16:755 Save route table snapshot... (T31296)Debug(4001): 11/18/20 16:46:16:755 No need to check virtual IP route before SetupNetwork finished (T31296)Debug(4773): 11/18/20 16:46:16:755 No change for gateway route (T31296)Debug(6231): 11/18/20 16:46:16:755 NetworkConnectionMonitorThread: Detected route change, but skip network discovery. (T29364)Debug( 788): 11/18/20 16:46:16:755 Retry finished SetupNetwork (T29364)Debug( 25): 11/18/20 16:46:16:755 create thread 0x770 with thread ID 11956 (T29364)Debug( 25): 11/18/20 16:46:16:755 create thread 0x77c with thread ID 30840 (T29364)Debug(6598): 11/18/20 16:46:16:755 --Set state to Connected (T11956)Debug( 436): 11/18/20 16:46:16:755 VpnProcDrv thread starts (T11956)Debug( 921): 11/18/20 16:46:16:756 New ProcDrv thread priority 2 (T30840)Debug( 450): 11/18/20 16:46:16:756 VpnProcTunnel thread starts (T30840)Debug(1001): 11/18/20 16:46:16:756 New ProcTunnel thread priority 2 (T6484)Debug(2358): 11/18/20 16:46:16:756 Setting debug level to 5 (T29364)Debug(10788): 11/18/20 16:46:16:756 SetVpnStatus called with new status=1, Previous Status=0 (T29364)Debug(4101): 11/18/20 16:46:16:756 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T17604)Debug(2140): 11/18/20 16:46:18:769 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "53" (T6748)Info ( 502): 11/18/20 16:46:35:476 msgtype = disconnect (T6748)Debug(1839): 11/18/20 16:46:35:476 ----Tunnel User Diconnecting starts---- (T6748)Debug(1405): 11/18/20 16:46:35:476 m_msp->IsVPNConnected() is 1, CControlManager::GetInstance()->IsInRetry() is 0 (T6748)Debug(6598): 11/18/20 16:46:35:476 --Set state to Disconnecting... (T6748)Info (2664): 11/18/20 16:46:35:476 Disconnect(no reason) called (T35908)Debug(4113): 11/18/20 16:46:35:476 LifeTimeThread receives m_hExitLifeTimeThreadEvent (T35908)Debug(4141): 11/18/20 16:46:35:476 LifeTimeThread quits (T6748)Debug( 709): 11/18/20 16:46:35:476 vpn disconnect (T6748)Debug( 710): 11/18/20 16:46:35:476 Delete m_vpn in CControlManager::DisconnectVPN() (T29364)Info ( 534): 11/18/20 16:46:35:476 PktProcess: VPN disconnect event, get out of ProcMonitor (T29364)Debug( 614): 11/18/20 16:46:35:476 Tunnel downtime is 18735 miliseconds (T11956)Info ( 930): 11/18/20 16:46:35:476 ProDrv: VPN disconnect event, get out of ProcDrv (T11956)Info ( 959): 11/18/20 16:46:35:476 ProcDrv thread dies (T29364)Info ( 893): 11/18/20 16:46:35:476 ProcDrv quit (T30840)Info (1010): 11/18/20 16:46:35:476 ProTunnel: VPN disconnect event, get out of ProcTunnel (T30840)Info (1026): 11/18/20 16:46:35:476 ProcTunnel thread dies (T29364)Info ( 974): 11/18/20 16:46:35:476 ProcTunnel quit (T29364)Info ( 879): 11/18/20 16:46:35:476 ProcMonitor thread dies (T6748)Debug( 318): 11/18/20 16:46:35:581 tunnel statistics: send bytes(125258) packets(1250) errors(0) drops(0) queue-size(130), recv bytes(0) packets(0) errors(0) drops(0) queue-size(0) (T6748)Debug( 320): 11/18/20 16:46:35:581 do_disconnect is called in VPN stop (T6748)Debug( 229): 11/18/20 16:46:35:581 IPSec anti-replay statistics: outside window count 0, replay count 0 (T6748)Debug( 231): 11/18/20 16:46:35:581 Disconnect udp socket (T6748)Debug( 530): 11/18/20 16:46:35:581 unset network (T6748)Debug(2599): 11/18/20 16:46:35:581 Unset 3 routes (T6748)Debug(2619): 11/18/20 16:46:35:581 UnsetRoutes: DeleteIpForwardEntry[0] (10.0.0.0) (T6748)Debug(2619): 11/18/20 16:46:35:581 UnsetRoutes: DeleteIpForwardEntry[1] (888.88.0.0) (T6748)Debug(2619): 11/18/20 16:46:35:581 UnsetRoutes: DeleteIpForwardEntry[2] (192.168.0.0) (T6748)Debug(6074): 11/18/20 16:46:35:581 UnsetGatewayRoutes: DeleteIpForwardEntry(888.88.888.888) (T6748)Info (4654): 11/18/20 16:46:35:581 RemoveGatewayInRouteTable(vnicIdx=2) (T6748)Info (4702): 11/18/20 16:46:35:581 delete 1 ip forward entry: 88.88.8.88 (T6748)Info (4702): 11/18/20 16:46:35:581 delete 2 ip forward entry: 224.0.0.0 (T6748)Info (4702): 11/18/20 16:46:35:581 delete 3 ip forward entry: 255.255.255.255 (T6748)Debug(2558): 11/18/20 16:46:35:581 UnsetRoutesV6: No route installed before (T6748)Debug(1352): 11/18/20 16:46:35:581 Disconnect virtual interface (T31296)Debug(6153): 11/18/20 16:46:35:991 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T6748)Debug( 25): 11/18/20 16:46:36:147 create thread 0x77c with thread ID 21164 (T6748)Debug(1368): 11/18/20 16:46:36:147 Start FlushDNSCache thread 0x77c (T152)Debug( 529): 11/18/20 16:46:36:163 ST,exit reader set!!!!(T152)Debug(3061): 11/18/20 16:46:36:163 ST,End gp filter reader (T21164)Debug(2140): 11/18/20 16:46:36:163 FlushDNSCache thread: run cmd: cmd /C ipconfig /flushdns > "54" (T6748)Debug(2441): 11/18/20 16:46:36:350 ST,service status is 00000004 (T6748)Debug(2446): 11/18/20 16:46:36:350 ST,service alreUser1 started (T6748)Debug(2449): 11/18/20 16:46:36:538 ST,Service stop send, current status = 00000001. (T6748)Debug(1172): 11/18/20 16:46:36:538 SPStop is called (T6748)Debug( 784): 11/18/20 16:46:36:553 PreviousDNSInfo doesn't exist, no need to restore (T6748)Debug(5612): 11/18/20 16:46:36:569 DLSA, savedMetric1Routes not present, do not need to restore (T6748)Debug(5009): 11/18/20 16:46:36:569 Proxy is not disabled before, no need to restore (T6748)Debug( 784): 11/18/20 16:46:36:585 PreviousDNSInfo doesn't exist, no need to restore (T6748)Debug(1797): 11/18/20 16:46:36:639 UnsetDNSSuffixSearchOrder returns 0 (T6748)Debug( 612): 11/18/20 16:46:36:681 return error code is 84, 00000054 (T6748)Debug(1802): 11/18/20 16:46:36:681 UnsetDNSServerSearchOrder returns 0 (T6748)Debug(1804): 11/18/20 16:46:36:717 UnsetWINSServer returns 84 (T6748)Info ( 100): 11/18/20 16:46:36:728 VPN is deleted (T6748)Debug( 577): 11/18/20 16:46:36:728 DisconnectVPN called (T6748)Debug(3216): 11/18/20 16:46:36:728 set driver connected as false (T6748)Debug(6598): 11/18/20 16:46:36:728 --Set state to Disconnected (T6748)Info (2290): 11/18/20 16:46:36:729 logout: user=username1, portal=ACME-VPN-N, gateway=vpn.acmecompany.com, domain=acmecompany.com, computerName=HOST-PC (T6748)Debug(2322): 11/18/20 16:46:36:729 Logout parameter is (T6748)Debug( 780): 11/18/20 16:46:36:729 SSL connecting to 888.88.888.888 (T6748)Debug( 559): 11/18/20 16:46:36:743 Network is reachable (T6748)Debug(4520): 11/18/20 16:46:36:811 SSL verify succeed (T6748)Debug(1323): 11/18/20 16:46:36:891 OpenSSL alert write:warning:close notify (T6748)Debug(2368): 11/18/20 16:46:36:891 Logged out gateway vpn.acmecompany.com (T6748)Debug(6598): 11/18/20 16:46:36:891 --Set state to Disconnected (T6748)Debug(10788): 11/18/20 16:46:36:891 SetVpnStatus called with new status=0, Previous Status=1 (T6748)Debug(4101): 11/18/20 16:46:36:892 UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T6748)Debug(1600): 11/18/20 16:46:36:892 Send response to client for request disconnect (T31296)Debug(4727): 11/18/20 16:46:36:892 No need to check gateway route since no tunnel. (T31296)Debug(6214): 11/18/20 16:46:39:916 NetworkConnectionMonitorThread: m_state = 0, m_bOnDemand=1, m_bAgentEnabled=1, m_bJustResumed is 0, m_bHibernate is 0, m_bAgentEnabled is 1, m_bDisconnect is 0, IsConnected() is 0, IsVPNInRetry() is 0. (T31296)Debug(4727): 11/18/20 16:46:39:916 No need to check gateway route since no tunnel. (T31296)Debug(6231): 11/18/20 16:46:39:916 NetworkConnectionMonitorThread: Detected route change, but skip network discovery.
11-19-2020 02:09 AM
so here are the disconnect reasons...
(T29364)Info (1249): 11/18/20 16:44:19:928 --Too many outstanding keepalive and no response from GP
(T29364)Info (1249): 11/18/20 16:45:16:199 --Too many outstanding keepalive and no response from GP
(T29364)Info (1249): 11/18/20 16:46:12:262 --Too many outstanding keepalive and no response from GP
but we see no reason for this so must be the router connection.
It could be that after the initial ssl negotiation the tunnel used udp on port 4501. perhaps the amplifi lan does not know what to do with this... hence the keepalives are not getting back to you.
ask your co if they can disable ipsec for testing...
my next test would be to packet capture on both wifi and lan to see if any difference in tunnel traffic.
also... if you have access to the amplifi firewall (never used one) then try blocking outgoing udp 4501. this will then force the tunnel to use ssl..
11-19-2020 11:08 AM
@adrian109 - I am experiencing the exact same issue, and I also have the Amplifi HD mesh router. Seems like more than a coincidence...
11-19-2020 12:21 PM
@adrian109 - Did you happen to configure any Amplifi options via the web interface (as opposed to the mobile app)? I enabled the DNS Ad Blocker from there a while ago but didn't think to look there since Wi-Fi worked just fine (so long as I disabled the Ethernet interface).
So... I just now unchecked the DNS Ad Blocker setting and retried everything, and it looks like my Ethernet works again!
11-19-2020 01:10 PM
Doesn't look like I have the DNS Ad Blocker enabled unfortunately.
What Firmware version are you running on your Amplifi HD?
I'm on the BETA programme so have the latest BETA firmware version: 3.4.3
11-19-2020 04:14 PM
I guess I spoke to soon... after about 30-45 mins, I was disconnected and could not reconnect via Ethernet. Before I changed the Ad Blocker setting, GP would actually say I was connected yet I couldn't access ANY sites at all, similar to you - and I would have to literally disable the Ethernet adapter for GP to work via Wi-Fi... This last time (after disabling the ad blocker), I didn't need to disable the Ethernet adapter - just connected to Wi-Fi and refreshed my GP connection.
I am on 3.4.3 as well - but not beta... I tried the DNS cache bypass too, and it didn't fix it either. I may try the NAT setting next.
11-20-2020 03:25 AM
BTW - I have an open post on the Ampifi community forum with this same issue posted to see if it gets any response from them.
https://community.amplifi.com/topic/3916/unable-to-connect-to-my-work-vpn
It does appear to be an issue with the Amplifi HD because I have just done a test with it totally removed from my network as I plugged my PC directly into my Virgin modem, in this configuration the VPN stays connected and I retain internet access on my local PC.
I have sent my support logs to Amplifi to see if that can help them diagnose the issue.
11-20-2020 09:33 AM
Amplifi support have been in contact with me since I sent them the logs from my Amplifi HD.
They have asked me to disabled the Hardware NAT setting and to test again to see if that has any difference.
I can confirm that with the Hardware NAT option disabled I can now connect to my work VPN using GlobalProtect and the connection still allows me to use my internet connection on my local PC.
It seems to be the Hardware NAT setting that is causing the issue when using a wired connection. I noticed next to the Hardware NAT setting on the UI screen that the description says "Accelerate throughput for wired stations".
I guess that explains why it worked when connecting to the Amplifi HD using wireless as that setting doesn't apply to wireless clients.
11-23-2020 09:22 AM
@adrian109 Thanks for the update. I have disabled my HW NAT now as well, and will see how that goes. I have another computer using Ethernet that has been fine for years - or however long it's been since HW NAT was introduced - so still not sure why it would have a problem with GP client and no other software that I use (including other 3rd party VPN clients )... Keep me posted!
11-24-2020 03:23 AM
Try this steps:
01-21-2021 12:55 PM
This is definitely a PAN OS 10.0.3 / Windows 10 20H2 issue. I confirmed it on two laptops today. One is running Pro and one is running Enterprise.
I dropped down to Windows Pro 1903 and had no issues connecting to the PAN OS 10.0.3 firewall
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
