PanGPA and PanGPS logs

[syed222]

We now have more cases of users complaining of GP disconnect or slowness. 

Need assistance reading the Global protect logs from the Agent. 

Are there any know codes for Dump , Debug and Info that i should be looking out for when going through the log file.

[nikoolayy1 · Accepted solution]

You can take a look at:

LIVEcommunity - Knowledge sharing: Globalprotect troubleshooting/investgation. Split tunnel,Globalpr...

Also for Globalprotect 5.2 and Palo Alto 9.1 you can see performance and latency from the Gateway Firewall:

GlobalProtect Gateway Latency Reporting (paloaltonetworks.com)

Also if you see many disconnect from the log you may a bottleneck in your network or if there is downgrade in the logs from ipsec to ssl it is bad as SSL is worse for performance.

How to detect when Global Protect client fails to establish IPS... - Knowledge Base - Palo Alto Netw...

Troubleshooting GlobalProtect - Knowledge Base - Palo Alto Networks

In rare cases changing the MTU of the globalprotect can help:

Troubleshooting GlobalProtect MTU issues | Palo Alto Networks

Edit:

Also there is a nice subscription feature you may consider to use "GlobalProtect App Log Collection for Troubleshooting":

GlobalProtect App Log Collection for Troubleshooting (paloaltonetworks.com)