Globalprotect 5.2.5 popup message

[a.jones]

Hi All,

Having just deployed version 5.2.5 when I connect on Globalprotect I get a pop up stating "The network connection is unreliable and GlobalProtect reconnected using an alternate method......". This did not appear before and was not present on 5.2.4. We need version 5.2.5 for O365 split tunneling, there is an issue using 5.2.3 and 5.2.4.

I have noticed I'm connecting as SSL even though the gateway is configured for "enable Ipsec" and the rule has Ipsec in it's app field.

Is there a way to remove this notification (having looked I can't see anything obvious)? I will shortly be pushing this client out to 3500 users.

Regards

Adrian

[emr_1 · Accepted solution]

@a.jones 
At this point, disabling IPSEC mode under GlobalProtect Gateway config is the way to remove pop-up.

I already opened ticket and TAC said he will fix the issue in GP 5.2.6, and new option will be available under Agent Configuration in GlobalProtect portal.

Hope this will help you.

Regards,

Emr

[a.jones]

Thanks. I had disabled and it cleared. Pain but I'll have to live with it until next version.

Regards

Adrian

[fb-pan]

Thanks for sharing this information Emr

I hope 5.2.6 will be out soon.

[emr_1]

Hi All,

Just to share the latest info with you all.

GP Agent v5.2.5-c84 was released instead of v5.2.6.

You can find the addressed issue in release note:

===

https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-release-notes/gp-app-release-i...

GPC-12568

Fixed an issue where, when the Connect with SSL Only option was specified as the GlobalProtect connection setting, the GlobalProtect app displayed the notification The network connection is unreliable and GlobalProtect reconnected using an alternate method. You may experience slowness when accessing the internet or business applications. when the GlobalProtect connection cannot be established as IPSec and then falls back to SSL.

===

In addition to above, after you update your content signature, you can find new option in App Configuration under GlobalProtect portal setting, called 'Display IPSec to SSL Fallback Notification'.

Default value is 'yes'

Regards,

Emr