01-15-2024 05:20 AM - edited 01-15-2024 05:22 AM
GlobalProtect instability is in all latest versions.
Downgrade to 9.1.16-hx
Enable IPSec reduces the issue and it is always best to have it enabled because then GlobalProtect encapsulates traffic into UDP instead of TCP.
IPSec offers better performance and don't have TCP meltdown problems.
IPSec requires UDP/4501 to be permitted.
Global Protect Client disconnect Issues after upgrading to Pan-OS 11.1.0
https://live.paloaltonetworks.com/t5/globalprotect-discussions/global-protect-client-disconnect-issu...
GlobalProtect Connection Issues in PAN-OS 10.2.7-h3
https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-connection-issues-in-pa...
PAN OS 9.1.17 Global Protect Issues
https://live.paloaltonetworks.com/t5/globalprotect-discussions/pan-os-9-1-17-global-protect-issues/t...
