cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

Cyber Elite
Cyber Elite

 

It tries to use UDP 4501.

Client will show protocol as IPSec.

If client is in limited network then GlobalProtect will fall back to TCP 443.

Client will show protocol SSL.

Issue is that in case on SSL TCP packets received from application are encapsulated into second TCP packet.

It adds overhead and can cause problems in case of bad connectivity (Search what "TCP meltdown" means).

 

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011
Who rated this post