Globalprotect 5.2.5 popup message

[a.jones]

Hi All,

Having just deployed version 5.2.5 when I connect on Globalprotect I get a pop up stating "The network connection is unreliable and GlobalProtect reconnected using an alternate method......". This did not appear before and was not present on 5.2.4. We need version 5.2.5 for O365 split tunneling, there is an issue using 5.2.3 and 5.2.4.

I have noticed I'm connecting as SSL even though the gateway is configured for "enable Ipsec" and the rule has Ipsec in it's app field.

Is there a way to remove this notification (having looked I can't see anything obvious)? I will shortly be pushing this client out to 3500 users.

Regards

Adrian

[Eric_Barger]

All,

I just deployed 5.2.7-37 and this still persists.. Disabling IPsec may not be an option. Say may have to fall back to 5.2.4. 

[Damian_P]

You need both 5.2.7 and the "Display IPSec to SSL Fallback Notification" set to "No" (under Portal Agent Config)

Confirmed fixed

[dsvaughan]

I just upgraded to version 5.2.11 and I am having the same issue. Do we have any update on when this will be fixed?

[Eric_Barger]

All to get rid of the popup you need to uncheck it in the Portal>Agent>App tab - "Dispay IPSec to SSL Fallback Notification". 

[dsvaughan]

I found the following which shows how to disable IPSec and we already did it. I was wondering when Palo Alto would address the issue. The post said it might be in version 5.2.7 and it is not.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001Uh1CAE&lang=en_US%E2%80%A...

We have already done 

[danoman2]

This works.  Thanks Eric.  Not sure why I didnt disable that from the beginning.