06-17-2022 01:50 PM
After upgrading from 9.1.13-h to 9.1.14 issue was noticed (not sure if it was present earlier) - in about a week/two GlobalProtect stops responding - even portal page is not opening from the browser, so also GP client connection fails. It is not getting to authentication or anything further. Portal IP is responding in general - pings are fine and even initial TCP 3-way handshake is seen in the captures.
HA failover to secondary helps. Rebooting failed device helps. Rebooting only dataplane also helps.
Took some information and will research that, not going too deep here, but, by any chance, has anyone seen something like this?
06-17-2022 10:12 PM
I'd open a support ticket with TAC just to verify if anyone else is reporting this behavior. I've ran into this at various times due to previous software issues exactly as you've described with failover and restarts working, and it usually happens that simply restarting the sslvpn process is enough to get things fully functional without a failover of any sort.
Seems like we've had a few different reports of issues with 9.1.14 though, so I wouldn't be surprised to hear that there's a process issue in that release at the moment.
06-17-2022 11:47 PM
@BPry.,
Thank you for the input - TAC case will be the way to go, that's for sure.
Tried sslmgr, rasmgr, webssl process restarts and debugs to try and narrow down the issue, but did not help - dataplane restart was the last straw.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
