GP 6.2.1 stopped to work on Linux

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

GP 6.2.1 stopped to work on Linux

L1 Bithead

Hello,
This morning we detected that Global protect version 6.2.1 stopped to work on several Linux Distributions.Released on the 09/26/2024.

This version is widely used by our organisation and worked perfectly.

Issue:

  1. Global Protect start normally
  2. Portal information is correct within Global Protect
  3. Connect button available and working
  4. PopUp requesting for authentication appears
  5. Once validating username, GP windows disapears
  6. Password is never requested., GP is running.

No GP configuration changes were made on FW / Clients.
Could it be due to FW automatic updates?

Installing the Version 6.2.0- released on the 05/13/2024 solved the issue. No configuration change were done.
Is it a known issue?

Linux updates might be the source causes, but it all happen on different distributions, Ubuntu, Centos, RH..

Anyone experienced the same issue?

 

THx

2 REPLIES 2

L1 Bithead

PanGUI.log with GP 6.2.1

RECV_FROM_GPA: <request><type>start-gui</type></request>
P4059-T1993991744 02/07/2025 12:08:08:294 Info ( 689): debug thread starts
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug( 82): PanGPA connection successful
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4530): SetupDBusEnv: UID = 10015319
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4531): SetupDBusEnv: XDG_RUNTIME_DIR = /run/user/10015319
P4059-T-1953818304 02/07/2025 12:08:09:298 Debug(4532): SetupDBusEnv: DBUS_SESSION_BUS_ADDRESS = unix:path=/run/user/10015319/bus
P4059-T-1953818304 02/07/2025 12:08:09:495 Debug( 254):
SEND_TO_GPA: <request><type>get_config</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:09:495 Debug(3248): GP Initial Handshake State: 1/4: Send GET_CONFIG to GPA
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 193):
RECV_FROM_GPA: <response><type>get_config</type><use-ssl-tunnel>no</use-ssl-tunnel><can-change-portal>yes</can-change-portal><default-browser>no</default-browser><on-demand>yes</on-demand><enable-signout>yes</enable-signout><pan-fips-initialization-status>0</pan-fips-initialization-status><disable-allowed>yes</disable-allowed><last-url>vpn1.CONTOSO.com</last-url><rediscover-network>yes</rediscover-network><fed-mandate>no</fed-mandate><cdl-log>no</cdl-log></response>
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 188): PanGPUIStatusMgr::updateConfig can_change_portal 1
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 195): PanGPUIStatusMgr::updateConfig default_browser 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 208): PanGPUIStatusMgr::updateConfig: disable-allowed true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 215): PanGPUIStatusMgr::updateConfig: last-url vpn1.CONTOSO.com
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 222): PanGPUIStatusMgr::updateConfig: enable_signout received true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 230): PanGPUIStatusMgr::updateConfig: rediscover_network received true
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 237): PanGPUIStatusMgr::updateConfig fed_mandate 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 244): PanGPUIStatusMgr::updateConfig cdl_log 0
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug(4733): GP Initial Handshake State: 2/4: Received GET_CONFIG from GPA
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug( 254):
SEND_TO_GPA: <request><type>retrieve-last-state</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:09:535 Debug(2708): GP Initial Handshake State: 3/4: Send retrieve-last-state to GPA
P4059-T-1953818304 02/07/2025 12:08:10:010 Debug( 193):
RECV_FROM_GPA: <?xml version="1.0" encoding="UTF-8"?>
<response>
<type>saml-pre-login</type>
<status>Disconnected</status>
<protocol/>
<portal-config-version>4100</portal-config-version>
<error-must-show/>
<error-must-show-level>error</error-must-show-level>
<error/>
<product-version>6.2.1-276</product-version>
<product-code/>
<portal-status>Invalid portal</portal-status>
<user-name>USercontoso</user-name>
<username-type>saml</username-type>
<state>Retrieving configuration...</state>
<check-version>no</check-version>
<portal>vpn1.Contoso.com</portal>
<discover-ready>no</discover-ready>
<mdm-is-enabled>no</mdm-is-enabled>
<saml-auth-status>0</saml-auth-status>
<saml-auth-method>REDIRECT</saml-auth-method>
<saml-request>long.............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</saml-request>
<prelogin-cookie/>
<saml-prelogin-portal>yes</saml-prelogin-portal>
<saml-chrome-sso-support/>
<cas-auth/>
<saml-default-browser>yes</saml-default-browser>
<saml-request-id>0</saml-request-id>
</response>

P4059-T-1953818304 02/07/2025 12:08:10:012 Debug(1425): GP Initial Handshake State: 4/4: Complete
P4059-T-1953818304 02/07/2025 12:08:10:271 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unrecognized Content-Security-Policy directive 'frame-ancestors'.

P4059-T-1953818304 02/07/2025 12:08:10:740 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unrecognized Content-Security-Policy directive 'frame-ancestors'.

P4059-T-1953818304 02/07/2025 12:08:12:009 Debug( 31): PanGPUIWebPage::javaScriptConsoleMessage: Javascript&colon; Unhandled promise rejection
P4059-T-1953818304 02/07/2025 12:08:22:418 Debug( 193):
RECV_FROM_GPA: <request><type>start-gui</type></request>
P4059-T-1953818304 02/07/2025 12:08:23:527 Debug( 254):
SEND_TO_GPA: <request><type>disconnect</type><uid>10015319</uid></request>
P4059-T-1953818304 02/07/2025 12:08:23:833 Debug( 193):
RECV_FROM_GPA: <response><type>status</type><state>Disconnected</state><error></error><user-name>USERCONTOSO</user-name><network-type></network-type><gateway-list><gateway><name>vpn1.CONTOSO.com</name><ip>vpn1.CONTOSO.com</ip><tunnel>no</tunnel><priority>-1</priority><auth>no</auth><internal>no</internal></gateway></gateway-list><portal-status>Invalid portal</portal-status><last-url>vpn1.CONTOSO.com</last-url><disable>no</disable><on-demand>yes</on-demand><pan-fips-initialization-status>0</pan-fips-initialization-status></response>
P4059-T-1953818304 02/07/2025 12:08:24:034 Debug( 193):
RECV_FROM_GPA: <response><type>disconnect</type><state>Disconnected</state><error></error><portal-status>Invalid portal</portal-status><last-url>vpn1.contoso.com</last-url><disable>no</disable><on-demand>yes</on-demand><pan-fips-initialization-status>0</pan-fips-initialization-status></response>

L1 Bithead

pangps.log

  • 357 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!