About Joshan_Lakhani

@NikolayDimitrov    It's virtual interface. For physical interface is where it's shutdown or auto mode is not impacts on IPSec interface. As all the other IPsec tunnel interface status shows green but only one tunnel is having the issue,     ... View more

@NikolayDimitrov    Hi this issue is with passive firewall on active firewall tunnel interface is working fine. Furthermore, i have check on passive firewall phase2 is up and phase 1 is down and it's expected behavior but my question is why interface status shows red infect tunnel monitoring is already disable.   Please advise.   ... View more

Is resolved after install 1.0.0 pulgin in VM-50 now i can see step page.   Moreover this information is from Paloalto Document    The VM-Series plugin is a built-in component that can be upgraded or downgraded, but not removed. Each PAN-OS release includes a specific VM-Series plugin version that corresponds to the PAN-OS software version. When you downgrade to an earlier PAN-OS software version, the plugin version is downgraded to the version compatible with the PAN-OS version. You can upgrade or downgrade the VM-Series plugin locally on the virtual firewall, or manage the plugin version centrally from Panorama. ... View more

@dmifsud  Iam also disable the antivirus as well as window firewall still i can't see the pacp capture file on 4501 ... View more

@dmifsud @MickBall    Thanks for you reply   Yes ipsec is enable on global protect gateway. Moreover it's trying to took packet capture on port source 4501 as well as on destination port but it's cannot find pacp file is generated.     ... View more

@MickBall    Paloalto Version is 9.0.9h1 @dmifsud    I have check the security policy and it's created any any.  Moreover i take the pacp but not packet is hit on 4501 port. Can you please advise ... View more

@MickBall    Global protect version is 5.2.5 version ... View more

@MickBall    As i troubleshoot further i found that all the user are connect via ssl VPN but we have configure the IPSEC vpn.   Global protect Version is 5.2.5   (P4912-T7656)Debug( 166): 02/21/21 13:54:12:406 Trying to do ipsec connection to 178.153.34.106[4501] (P4912-T7656)Debug( 487): 02/21/21 13:54:12:406 socket send buffer old size is 65536 (P4912-T7656)Debug( 511): 02/21/21 13:54:12:406 socket send buffer new size is 3145728 (P4912-T7656)Debug( 563): 02/21/21 13:54:12:413 Network is reachable (P4912-T7656)Info ( 178): 02/21/21 13:54:12:414 Connected to: 178.153.34.106[4501], Sending keep alive to ipsec socket... (P4912-T7656)Info ( 221): 02/21/21 13:54:18:427 failed to receive keep alive (P4912-T7656)Debug( 229): 02/21/21 13:54:18:427 IPSec anti-replay statistics: outside window count 0, replay count 0 (P4912-T7656)Debug( 231): 02/21/21 13:54:18:427 Disconnect udp socket (P4912-T7656)Info ( 364): 02/21/21 13:54:18:427 Connecting to 178.153.34.106 failed (P4912-T7656)Info ( 276): 02/21/21 13:54:18:427 Start vpn do_connect() failed (P4912-T7656)Debug( 336): 02/21/21 13:54:18:427 tunnel statistics: send bytes(0) packets(0) errors(0) drops(0) queue-size(0), recv bytes(0) packets(0) errors(0) drops(0) queue-size(0) (P4912-T7656)Debug( 338): 02/21/21 13:54:18:427 do_disconnect is called in VPN stop (P4912-T7656)Debug( 709): 02/21/21 13:54:18:427 ipsec failed to start (P4912-T7656)Info ( 102): 02/21/21 13:54:18:427 VPN is deleted (P4912-T7656)Debug( 766): 02/21/21 13:54:18:427 IPSec fallback reason is IPSec connection failed (P4912-T7656)Debug( 161): 02/21/21 13:54:18:427 disconnect-on-idle timeout is 10800 (P4912-T7656)Debug( 171): 02/21/21 13:54:18:427 VPN idle timeout is 10800; config timeout is 10800 (P4912-T7656)Debug( 219): 02/21/21 13:54:18:427 EnforceDns is enabled, set 2 GP pushed DNS servers (P4912-T7656)Debug( 65): 02/21/21 13:54:18:427 Trying to do SSL connection to 178.153.34.106(443) (P4912-T7656)Debug( 788): 02/21/21 13:54:18:427 SSL connecting to 178.153.34.106 (P4912-T7656)Debug( 487): 02/21/21 13:54:18:427 socket send buffer old size is 65536 (P4912-T7656)Debug( 511): 02/21/21 13:54:18:427 socket send buffer new size is 3145728 (P4912-T7656)Debug( 563): 02/21/21 13:54:18:435 Network is reachable (P4912-T7656)Debug(1274): 02/21/21 13:54:18:471 Failed to X509_LOOKUP_load_file (P4912-T7656)Debug( 374): 02/21/21 13:54:18:471 Open_SSL_connection: subject '/CN=deltacrp.dyndns.org' (P4912-T7656)Debug( 378): 02/21/21 13:54:18:471 Open_SSL_connection: issuer '/CN=deltacrp.dyndns.org' (P4912-T7656)Info ( 113): 02/21/21 13:54:18:479 Connected ssl tunnel to 178.153.34.106(443) (P4912-T7656)Info ( 374): 02/21/21 13:54:18:479 tunnel to 178.153.34.106 connected (P4912-T7656)Debug( 394): 02/21/21 13:54:18:666 PsvRegister done (P4912-T7656)Debug( 25): 02/21/21 13:54:18:666 create thread 0xb70 with thread ID 14232 (P4912-T14232)Debug( 443): 02/21/21 13:54:18:667 VpnProcMonitor thread starts (P4912-T14232)Debug( 507): 02/21/21 13:54:18:667 New ProcMon thread priority 2 (P4912-T7656)Debug(3027): 02/21/21 13:54:18:667 Gateway: deltacrp.dyndns.org, client IP: 172.22.18.32 (P4912-T7656)Debug( 115): 02/21/21 13:54:18:667 SPInit ... View more

Dear @MickBall @dmifsud    Please find the Global protect Logs    (P5096-T20276)Debug( 25): 03/01/21 09:09:19:601 create thread 0x774 with thread ID 2636 (P5096-T20276)Debug(2325): 03/01/21 09:09:19:601 Start FlushDNSCache thread 0x774 (P5096-T20276)Debug( 575): 03/01/21 09:09:19:601 Save route table snapshot... (P5096-T20276)Debug( 780): 03/01/21 09:09:19:601 sslvpn connect() succeed (P5096-T20276)Debug( 782): 03/01/21 09:09:19:601 Send notification of The network connection is unreliable and GlobalProtect reconnected using an alternate method. You may experience slowness when accessing the internet or business applications.. (P5096-T20276)Debug(1730): 03/01/21 09:09:19:603 Send response to client for request gateway-failed (P5096-T20276)Debug(10891): 03/01/21 09:09:19:603 VPN tunnel is connected. (P5096-T20276)Debug(10895): 03/01/21 09:09:19:603 Enable life time and create life time thread. (P5096-T20276)Debug( 25): 03/01/21 09:09:19:603 create thread 0x7bc with thread ID 3624 (P5096-T20276)Debug(6849): 03/01/21 09:09:19:603 --Set state to Connected (P5096-T3624)Debug(4317): 03/01/21 09:09:19:603 LifeTimeThread starts (P5096-T20276)Debug(1142): 03/01/21 09:09:19:604 Display hip report V4 on the UI (P5096-T20276)Debug(11159): 03/01/21 09:09:19:604 SetVpnStatus called with new status=1, Previous Status=0 (P5096-T20276)Debug(4161): 03/01/21 09:09:19:604 UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (P5096-T20276)Debug(2660): 03/01/21 09:09:19:607 Tunnel is created with the gateway deltacrp.dyndns.org (P5096-T20276)Debug(1605): 03/01/21 09:09:19:607 Refresh proxy ... View more

Dear @MickBall    Thanks for your reply   As we have big environment around 400 to 500 users. we are not able to do in each and every system. is there is any other solution ?Please advise   ... View more

Dear @MickBall    When i run this command it's not working      Please advise   ... View more