Strata Cloud Manage - GlobalProtect Connection Error

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Strata Cloud Manage - GlobalProtect Connection Error

L0 Member

Hello, Live community.

This time, I deployed GlobalProtect SSL VPN in Strata Cloud Manage with SASE.

The current issue is as follows. The cover photo I uploaded is an image sent by such a user.

1. Some users cannot connect to SSL VPN with A.gpcloudservice.com.
As a result of checking the log in Log viewer > GlobalProtect in SCM, I confirmed the other party's public IP, and I can see the before-login Stage packet, Login Stage packet without Src Username, and Login Stage packet with Source Username (all three packets have Event Status = Success).

In my opinion, since SAML authentication was successful, it should be initiated to the next stage such as Configuration and Tunneling. However, some users only see normal SAML logs and the connection is not completed after that (GP Client is in Connecting status...)

2. Some other users use it normally for a while and then suddenly it doesn't work.

Sometimes, the log is displayed like Case 1. This time, a new case has appeared, and there is no log for access attempts.
It was a user who was using it normally, and even if the public IP changed, all public IPs were allowed to access it. Also, the user of this new case is a user who has not moved to another country.
It is incomprehensible that the same country, same IP, and PC that was used well before suddenly does not even leave an access attempt log.

Question: What should I suspect? Since it is an initial distribution, it was distributed preemptively only to certain users, so there is no problem such as exceeding the license.

Thank you.

0 REPLIES 0
  • 217 Views
  • 0 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!