This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ET
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ET
09-05-2023
25Posts
2Likes
2Solutions
Sep 05, 2023Last Visited
User
Activity
User
Profile
Latest posts by ET
| Subject | Views | Posted |
|---|---|---|
| 2489 | 09-09-2020 02:51 AM | |
| 13601 | 03-06-2019 04:37 AM | |
| 4945 | 12-03-2017 07:37 AM | |
| 11525 | 06-13-2017 06:37 AM | |
| 11559 | 03-12-2017 04:45 AM | |
| 3356 | 02-28-2017 03:07 AM | |
| 3487 | 02-28-2017 02:58 AM | |
| 3491 | 02-28-2017 02:47 AM | |
| 3545 | 02-28-2017 01:52 AM | |
| 5578 | 12-27-2016 07:51 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-03-2017 07:37 AM | |
| 1 Like | 08-22-2014 09:09 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes | |||
| 1 Like | |||
| 5 Likes | |||
| 2 Likes | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 06-24-2014 02:06 AM |
| Date Last Visited | 09-05-2023 07:59 AM |
| Posts | 25 |
| Total Likes Received | 2 |
09-09-2020
02:51 AM
When using Internal Detection and user starts up his workstation while connected internally (In the LAN), the agent first tries to reach the EXTERNAL portal to check for new configuration. If the External Portal is not reachable, it will wait for 180 seconds (3 min) and then use the previous cached config. This log will appear in GPS log: GP Debug( 102): connect failed with 180 seconds timeout. In case we use Network enforce feature - the client will block all traffic on the client for 3 minutes. How can this timeout period configured? (T6492) 08/19/20 19:55:37:687 Debug(9339): SSO password is empty (T6492) 08/19/20 19:55:37:687 Debug(2484): m_preUsername Yonit (T6492) 08/19/20 19:55:37:687 Debug(2505): CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout 0, RenameTimeout -1, userName Yonit, preUsername Yonit (T6492) 08/19/20 19:55:37:687 Info (2624): Received manual select gateway portal message (T6492) 08/19/20 19:55:37:687 Debug(2640): Use ssl tunnel is no (T6492) 08/19/20 19:55:37:687 Debug(5934): --Set state to Retrieving configuration... (T6492) 08/19/20 19:55:37:773 Debug(11723): Portal's ipv4 address 222.222.222.222 (T6492) 08/19/20 19:55:37:773 Debug(6945): SSO enable status is 0, user name is Yonit, domain name is . (T6492) 08/19/20 19:55:37:773 Debug(2178): open http session. agent is PAN GlobalProtect/5.0.7-2 (Microsoft Windows 10 Pro for Workstations , 64-bit) (T6492) 08/19/20 19:55:37:774 Debug( 456): winhttp SetSecureProtocol, hSession=78216e40, bAllProtocol=0, gbFips=0 (T6492) 08/19/20 19:55:37:774 Debug( 456): winhttp SetSecureProtocol, hSession=782169c0, bAllProtocol=0, gbFips=0 (T6492) 08/19/20 19:55:37:776 Debug(1651): SetProxyForHost(https://vpn.vpn.com/ 😞 timeout:180 AutoDetect:1 url: proxy: bypass: proxystr: (T6492) 08/19/20 19:55:37:870 Debug(5979): ----Portal Pre-login starts---- (T6492) 08/19/20 19:55:37:870 Debug(4323): TriggerCaptivePortalDetection() return due to captive portal detection is in progress (0) or PreLogin is Done (1) (T6492) 08/19/20 19:55:37:890 Debug( 550): Network is reachable (T6492) 08/19/20 19:55:37:892 Debug(6005): Pre-login...,verifyportalcert=yes (T6492) 08/19/20 19:55:37:892 Debug(9690): Check cert of server 222.222.222.222 (T6492) 08/19/20 19:55:37:895 Debug( 777): SSL connecting to 222.222.222.222 (T6492) 08/19/20 19:55:37:910 Debug( 550): Network is reachable ///////////////////////////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////////////////////////// (T6492) 08/19/20 19:58:38:165 Debug( 102): connect failed with 180 seconds timeout.////////////////////////////////////////////////////////////////// (T6492) 08/19/20 19:58:38:165 Debug( 560): Failed to connect to 222.222.222.222 on 443 with return value -1 and socket error 0(0) (T6492) 08/19/20 19:58:38:165 Debug( 781): do_tcp_connect() failed (T6492) 08/19/20 19:58:38:165 Error(9736): ConnectSSL: Failed to connect to '222.222.222.222:443'. Disconnect ssl. (T6492) 08/19/20 19:58:38:165 Debug(9749): Cannot get server cert of 222.222.222.222 (T6492) 08/19/20 19:58:38:165 Debug(6039): Skip CheckServerCert result (T6492) 08/19/20 19:58:38:165 Debug(2621): encpostdata, encpostdata=000002017818B970, encpostdatalen=176 (T6492) 08/19/20 19:58:38:165 Debug(2790): REQID=135,IPADDR=vpn.vpn.com,PORT=443,URL=/global-protect/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=1,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T6492) 08/19/20 19:58:38:166 Debug(1299): Send response to client for request https_request (T6492) 08/19/20 19:58:38:166 Debug( 234): add message to delayed msg queue, number in queue is 0 (T6492) 08/19/20 19:58:38:269 Debug(2900): receive pan_msg_ping, 3 (T6492) 08/19/20 19:58:40:281 Debug(6105): prelogin to portal result is (null) (T6492) 08/19/20 19:58:40:281 Debug(6334): Failed to pre-login to the portal vpn.vpn.com with return value 0(0). (T6492) 08/19/20 19:58:40:282 Debug(7142): Failed to get portal config from portal vpn.vpn.com. (T6492) 08/19/20 19:58:40:282 Debug(7173): Try to restore last portal config from file. (T6492) 08/19/20 19:58:40:282 Debug( 41): Roaming profile is false (T6492) 08/19/20 19:58:40:305 Debug( 167): profileInfo username Yonit, profile path (null), server (null) (T6492) 08/19/20 19:58:40:452 Debug(12180): Saved cache portal configuration hash does not exist (T6492) 08/19/20 19:58:40:452 Debug(7184): last portal config is restored from file C:\Users\Yonit\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_6cb8a8d63dbda849b56ad1bc46e5a56.dat. (T6492) 08/19/20 19:58:40:452 Debug(11549): REGION-PRIO, cached region code is 10.16.0.0-10.31.255.255 (T6492) 08/19/20 19:58:40:457 Debug( 75): No <host> or <ip-address> in internal-host-detection (T6492) 08/19/20 19:58:40:457 Debug( 784): REGION-PRIO, gateway 0(GW1), 0, region = Any, priority = 1, portalRegion=10.16.0.0-10.31.255.255 (T6492) 08/19/20 19:58:40:457 Debug( 413): REGION-PRIO, regioncode=10.16.0.0-10.31.255.255, return priority 1, bManual=0 (T6492) 08/19/20 19:58:40:457 Debug( 908): Optional client-cert does not exist (T6492) 08/19/20 19:58:40:457 Debug(8436): Use proxy is true (T6492) 08/19/20 19:58:40:459 Debug( 41): Roaming profile is false (T6492) 08/19/20 19:58:40:475 Debug( 167): profileInfo username Yonit, profile path (null), server (null) (T6492) 08/19/20 19:58:40:491 Debug( 82): Saved portal config to file C:\Users\Yonit\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_6cb8a8d63dbda849b56ad1bc46e5a56.dat. (T6492) 08/19/20 19:58:40:491 Debug(1599): Proxy auto detect is not needed (T6492) 08/19/20 19:58:40:491 Debug(8480): RefreshPortalConfig is yes, RefreshPortalConfigInterval is 1 hours (T6492) 08/19/20 19:58:40:492 Debug(1783): SerializePortalConfigDigest to file C:\Users\Yonit\AppData\Local\Palo Alto Networks\GlobalProtect\PanPCD_6cb8a8d63dbda849b56ad1bc46e5a56.dat (T6492) 08/19/20 19:58:40:492 Debug(1784): Portal config digest is 7ad4a8e238b3f701058e0fc82bcafdb1 (T6492) 08/19/20 19:58:40:492 Debug(10827): kerberos, dynamic config value is yes, m_stopOnKerberosFail=0 (T6492) 08/19/20 19:58:40:492 Debug(10857): Timeout value: portal 60, connect 180, receive 90, retry 3 (T6492) 08/19/20 19:58:40:492 Debug(10860): Tunnel retry grace period is 3600 seconds (T6492) 08/19/20 19:58:40:492 Debug(10863): override-cc-username is no (T6492) 08/19/20 19:58:40:496 Debug(8520): Scep certificate renew period is 7 days. Scep cert auth cookie length is 0 (T6492) 08/19/20 19:58:40:496 Debug(8531): Otp portal 0, otp internal gateway 0, otp auto external gateway 0, otp manual only external gateway 0 (T6492) 08/19/20 19:58:40:496 Debug(8536): Prefer ipv6 is 0 after processing portal configuration. (T6492) 08/19/20 19:58:40:496 Debug(10359): No scep profile (T6492) 08/19/20 19:58:40:496 Debug(7194): this version of portal config is supported. (T6492) 08/19/20 19:58:40:496 Debug(7162): portal status is Using cached portal config. (T6492) 08/19/20 19:58:40:501 Debug(11091): Enforcer is not enabled (T6492) 08/19/20 19:58:40:509 Debug(1700): Enforcer,found 0 filter object belonging to us. (T6492) 08/19/20 19:58:40:509 Debug(8068): Delete the previous trusted root ca file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer (T6492) 08/19/20 19:58:40:511 Debug( 82): Saved root CA(1245 bytes) into file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer. (T6492) 08/19/20 19:58:40:514 Info (2575): Imported root ca. (T6492) 08/19/20 19:58:40:515 Debug( 82): Saved root CA(1334 bytes) into file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer. (T6492) 08/19/20 19:58:40:518 Info (2575): Imported root ca. (T6492) 08/19/20 19:58:40:519 Debug( 82): Saved root CA(1151 bytes) into file C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer. (T6492) 08/19/20 19:58:40:522 Info (2575): Imported root ca. (T6492) 08/19/20 19:58:40:522 Debug(8184): client cert is empty in portal config (T6492) 08/19/20 19:58:40:522 Debug(2416): Client cert is empty, no need to import to store (T6492) 08/19/20 19:58:40:522 Debug( 320): PanIsSSORegisted: did not find CP. (T6492) 08/19/20 19:58:40:522 Info (7396): Connect method is user-logon (T6492) 08/19/20 19:58:40:522 Debug(7407): On-demand mode is false. (T6492) 08/19/20 19:58:40:522 Debug(8721): SavePrelogon: Portal is vpn.vpn.com, PrelogonEnabled is 0 (T6492) 08/19/20 19:58:40:523 Debug( 477): Saved hip policy to file HipPolicy.dat. (T6492) 08/19/20 19:58:40:523 Debug(7440): Hip check interval is 3600000 ms. (T6492) 08/19/20 19:58:40:523 Debug(7444): Set check hip event (T6492) 08/19/20 19:58:40:523 Debug( 809): m_bScheduleFlag is set to 0 (T6492) 08/19/20 19:58:40:523 Debug( 297): Set hip check event. (T6492) 08/19/20 19:58:40:523 Debug(7446): Set hip missing patch check event. (T6492) 08/19/20 19:58:40:523 Debug(7507): Skip serialize portal user auth cookie for matched portal config digest (T20908) 08/19/20 19:58:40:523 Debug( 515): HipMissingPatchThread: Got CheckHipMissingPatchEvent during wait for 2*dwAverageCheckTime 14. Set hip missing patch check event. (T6492) 08/19/20 19:58:40:523 Debug(1526): Serialize empty cookie for portal vpn.vpn.com and pre-logon user (T20908) 08/19/20 19:58:40:523 Debug( 442): HipMissingPatchThread: now is 1597856320, last hip check is 1597850825, hip check interval is 3600000 (T20908) 08/19/20 19:58:40:523 Debug( 447): HipMissingPatchThread: wait -1909000 ms (T20908) 08/19/20 19:58:40:523 Debug( 467): nSleep <= 0. m_tLastHipCheckEventWakeup is 1597850825, m_dwHipCheckInterval is 3600000, Now is 1597856320. (T11972) 08/19/20 19:58:40:523 Info ( 246): HipCheckThread: got check hip event or time out. (T20908) 08/19/20 19:58:40:523 Debug( 386): CheckHipMissingPatchInOtherProcess() (T11972) 08/19/20 19:58:40:523 Debug( 255): HipCheckThread: Got CheckHipEvent. (T20908) 08/19/20 19:58:40:523 Debug( 389): Need to check missing patch. (T11972) 08/19/20 19:58:40:523 Debug( 787): SetNextScheduledHipCheckTime to 1597859920 (T11972) 08/19/20 19:58:40:523 Debug( 276): Last hip check event wakeup tick is 1597856320 (T11972) 08/19/20 19:58:40:523 Debug( 278): HipCheckThread: check hip in other process. (T11972) 08/19/20 19:58:40:523 Debug( 306): CheckHipInOtherProcess() (T11972) 08/19/20 19:58:40:523 Debug( 310): Need to collect hip data (T20908) 08/19/20 19:58:40:523 Debug( 310): CheckHipMissingPatchInOtherProcess(): Starting process PanGpHipMp.exe (T11972) 08/19/20 19:58:40:523 Debug( 117): Starting process PanGpHip.exe (T6492) 08/19/20 19:58:40:524 Debug(1533): SerializePortalPrelogonAuthCookie to file PanPPAC_a1ff168f86b8749c54b89a5a237cfe52.dat (T6492) 08/19/20 19:58:40:524 Debug(7532): Retrieved pre-logon-tunnel-rename-timeout value -1 (T6492) 08/19/20 19:58:40:524 Debug(7540): Retrieved user-switch-tunnel-rename-timeout value 0 (T6492) 08/19/20 19:58:40:524 Debug(7551): Retrieved preserve-tunnel-upon-user-logoff-timeout value 0 (T6492) 08/19/20 19:58:40:524 Debug(7564): Set preserver tunnel timeout to 0 (T6492) 08/19/20 19:58:40:524 Debug(7576): The value of can-continue-if-portal-cert-invalid is yes (T6492) 08/19/20 19:58:40:524 Debug(6583): prelogon status is 0 (T6492) 08/19/20 19:58:40:524 Debug(6752): Force discovery, set NetworkDiscoverEvent (T30404) 08/19/20 19:58:40:524 Debug( 515): Set hip report quit event (T30404) 08/19/20 19:58:40:524 Debug(4650): NetworkDiscoverThread: got network discover event. (T30404) 08/19/20 19:58:40:524 Debug(4657): ----Network Discover starts---- (T30404) 08/19/20 19:58:40:524 Debug( 787): SetNextScheduledHipCheckTime to 0 (T30404) 08/19/20 19:58:40:524 Debug( 809): m_bScheduleFlag is set to 0 (T30404) 08/19/20 19:58:40:524 Debug(4669): UpdatePrelogonStateForSSO to GP_VPN_STATUS_DISCONNECTED (T30404) 08/19/20 19:58:40:524 Debug(4112): UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T6492) 08/19/20 19:58:40:525 Debug(1299): Send response to client for request hip (T7828) 08/19/20 19:58:40:525 Debug(4532): No need to check gateway route since no tunnel. (T30404) 08/19/20 19:58:40:530 Debug( 550): Network is reachable (T30404) 08/19/20 19:58:40:531 Debug(1924): bNetworkAvailable is 1 (T30404) 08/19/20 19:58:40:531 Debug(1932): Network is available (T30404) 08/19/20 19:58:40:531 Debug(4674): finish check host reachable (T30404) 08/19/20 19:58:40:531 Debug(5934): --Set state to Discovering network... (T13068) 08/19/20 19:58:40:531 Debug(4465): CaptivePortalDetectionThread: IsDetectingCaptivePortal=1, PreLoginIsDone=0 (T13068) 08/19/20 19:58:40:531 Debug(4442): CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event. (T30404) 08/19/20 19:58:40:531 Debug( 911): Display hip report V4 on the UI (T30404) 08/19/20 19:58:40:532 Debug(4713): Logout gateways before network discover..., bJustResumed=0 (T30404) 08/19/20 19:58:40:532 Debug(4719): Logout gateways before network discover... (T30404) 08/19/20 19:58:40:532 Debug(1334): Logging out gateway, reason is Network discover (T30404) 08/19/20 19:58:40:532 Debug(1357): Logging out gateway 0, internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:532 Debug(2177): CPanMSService::Logout(): Gateway internal.vpn.vpn.local not log in yet. (T30404) 08/19/20 19:58:40:532 Debug(1365): Logging out gateway over (T30404) 08/19/20 19:58:40:532 Debug(11416): RetrieveClientIpByRemoteHost() - invalid remote host: . (T30404) 08/19/20 19:58:40:532 Debug( 185): SelectInternalGateways - failed to retrieve client source ipv6! (T30404) 08/19/20 19:58:40:532 Debug( 243): Client ip is out of Gateway 's source ip range (10.16.53.1-10.16.53.254)! (T30404) 08/19/20 19:58:40:532 Debug( 243): Client ip is out of Gateway 's source ip range (10.16.54.1-10.16.54.254)! (T30404) 08/19/20 19:58:40:532 Debug( 238): found matching ipv4 ipaddress (10.16.51.1-10.16.51.254) in the list for gateway () (T30404) 08/19/20 19:58:40:532 Debug( 337): Found match of client ip in the source ip list! (T30404) 08/19/20 19:58:40:532 Debug(4935): Process gateway: host internal.vpn.vpn.local, description internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:539 Debug(5012): Gateway internal.vpn.vpn.local ipv4 address is 10.254.254.254 (T30404) 08/19/20 19:58:40:539 Debug(5114): Gateway internal.vpn.vpn.local: ipv4 10.254.254.254, ipv6 , FQDN yes (T30404) 08/19/20 19:58:40:539 Debug(4935): Process gateway: host gw1.vpn.vpn.com, description GW1 (T11972) 08/19/20 19:58:40:600 Debug( 135): Wait for the ready event of hip report generated in other process. (T30404) 08/19/20 19:58:40:617 Debug(5012): Gateway gw1.vpn.vpn.com ipv4 address is 33.33.33.33 (T30404) 08/19/20 19:58:40:617 Debug(5114): Gateway gw1.vpn.vpn.com: ipv4 33.33.33.33, ipv6 , FQDN yes (T30404) 08/19/20 19:58:40:617 Debug(4738): Set network discover in progress (T30404) 08/19/20 19:58:40:617 Debug(4742): UpdatePrelogonStateForSSO to GP_VPN_STATUS_DISCONNECTED (T30404) 08/19/20 19:58:40:617 Debug(4112): UpdatePrelogonStateForSSO() - User-logon tunnel state = Disconnected (T30404) 08/19/20 19:58:40:617 Debug(11596): GetNetworkTypeDS (T30404) 08/19/20 19:58:40:617 Debug(11599): No ipv6 internal host detection. (T30404) 08/19/20 19:58:40:617 Debug(1816): IP 10.254.254.254 (T30404) 08/19/20 19:58:40:617 Debug(1835): host internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:621 Debug(1852): DnsQuery returns 0 (T30404) 08/19/20 19:58:40:621 Debug(1867): Resolved 254.254.254.10.in-addr.arpa for internal host detection with return value 0 (T30404) 08/19/20 19:58:40:621 Debug(1891): The host name is internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:621 Debug(5934): --Set state to Discovery complete (T30404) 08/19/20 19:58:40:622 Debug( 907): Display hip report V3 on the UI (T30404) 08/19/20 19:58:40:622 Debug(9842): SetVpnStatus called with new status=1, Previous Status=0 (T30404) 08/19/20 19:58:40:622 Debug(4112): UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T30404) 08/19/20 19:58:40:622 Debug(4799): NetworkDiscoverThread: network type is internal. (T30404) 08/19/20 19:58:40:622 Debug(4805): NetworkDiscoverThread: Discover internal network. (T30404) 08/19/20 19:58:40:622 Debug( 365): gateway count is 1. (T30404) 08/19/20 19:58:40:623 Debug( 368): Connect timeout for internal network discovery is 5 seconds. (T30404) 08/19/20 19:58:40:623 Info ( 384): DiscoverInternal: max-internal-gateway-connection-attempts = 0, 1 gateway(s) to try to connect. (T30404) 08/19/20 19:58:40:623 Debug(10080): NetworkDisoverEventSet is no, RedoNetworkDiscovery is no (T30404) 08/19/20 19:58:40:623 Info ( 407): DiscoverInternal: try to connect to gateway=internal.vpn.vpn.local. (T30404) 08/19/20 19:58:40:623 Debug(3098): entering for gateway internal.vpn.vpn.local. (T30404) 08/19/20 19:58:40:623 Debug(2178): open http session. agent is PAN GlobalProtect/5.0.7-2 (Microsoft Windows 10 Pro for Workstations , 64-bit) (T30404) 08/19/20 19:58:40:624 Debug( 456): winhttp SetSecureProtocol, hSession=78215c40, bAllProtocol=0, gbFips=0 (T30404) 08/19/20 19:58:40:625 Debug(5859): connect ssl. (T30404) 08/19/20 19:58:40:625 Debug( 777): SSL connecting to 10.254.254.254 (T6492) 08/19/20 19:58:40:626 Info ( 474): msgtype = refresh-configuration (T6492) 08/19/20 19:58:40:626 Debug(9391): ----Portal refresh configuration starts---- (T30404) 08/19/20 19:58:40:631 Debug( 550): Network is reachable (T30404) 08/19/20 19:58:40:647 Debug(5910): Internal gateway internal.vpn.vpn.local is authenticated with trusted CA. (T30404) 08/19/20 19:58:40:647 Debug(1106): Name internal.vpn.vpn.local matches pattern *.vpn.vpn.local (T30404) 08/19/20 19:58:40:647 Debug( 960): Hostname internal.vpn.vpn.local matches sub alt name *.vpn.vpn.local (T30404) 08/19/20 19:58:40:647 Debug(5982): Server cert is verified for gateway internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:647 Debug(5984): disconnect ssl. (T30404) 08/19/20 19:58:40:647 Debug(1311): SSL3 alert write:warning:close notify (T30404) 08/19/20 19:58:40:647 Debug(2821): Gateway: internal.vpn.vpn.local, client IP: 10.16.51.130 (T30404) 08/19/20 19:58:40:647 Debug(3251): m_msp->IsInPreserveTunnel() 0, m_msp->IsPrelogonRenameAuthFail() 0 (T30404) 08/19/20 19:58:40:647 Debug(12088): Set m_bPrelogonRenameAuthFail to 0 (T30404) 08/19/20 19:58:40:647 Debug(3286): ----Gateway Pre-login starts---- (T30404) 08/19/20 19:58:40:647 Debug(3309): Server cert is verified for gateway internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:647 Debug(3328): m_msp->GetGwSamlAuthStatus() -2, m_msp->IsUserJustLoginInPrelogon() 0, m_msp->IsPrelogonRenameAuthFail() 0 (T30404) 08/19/20 19:58:40:647 Debug(9907): Need to check gateway cert for internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:647 Debug(2621): encpostdata, encpostdata=000002017818B970, encpostdatalen=176 (T30404) 08/19/20 19:58:40:647 Debug(2790): REQID=136,IPADDR=internal.vpn.vpn.local,PORT=443,URL=/ssl-vpn/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T30404) 08/19/20 19:58:40:648 Debug(1299): Send response to client for request https_request (T30404) 08/19/20 19:58:40:830 Debug(2900): receive pan_msg_ping, 3 (T30404) 08/19/20 19:58:40:884 Debug(3378): Login to gateway (null) internal.vpn.vpn.local without ipv6 (T30404) 08/19/20 19:58:40:884 Debug(9939): StopCaptivePortalDetection() captive portal detection is in progress (T13068) 08/19/20 19:58:40:884 Debug(4465): CaptivePortalDetectionThread: IsDetectingCaptivePortal=0, PreLoginIsDone=1 (T13068) 08/19/20 19:58:40:884 Debug(4442): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. (T30404) 08/19/20 19:58:40:884 Debug(3408): Pre-login response is <?xml version="1.0" encoding="UTF-8" ?> <prelogin-response> <status>Success</status> <ccusername></ccusername> <autosubmit>false</autosubmit> <msg></msg> <newmsg></newmsg> <license>yes</license> <authentication-message>Enter login credentials</authentication-message> <username-label>Username</username-label> <password-label>Password</password-label> <panos-version>1</panos-version><region>10.16.0.0-10.31.255.255</region> </prelogin-response> (T30404) 08/19/20 19:58:40:884 Debug(3460): REGION-PRIO, internal network, ignore any region code now (T30404) 08/19/20 19:58:40:884 Debug(6038): Auth message is Enter login credentials for gateway internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:884 Debug(6066): Gateway license yes, license-v6 yes (T30404) 08/19/20 19:58:40:885 Debug(3592): ----Gateway Login starts---- (T30404) 08/19/20 19:58:40:885 Debug(10094): Set to service bUseCCUserGateway 0 and ccUserNameGateway (T30404) 08/19/20 19:58:40:885 Debug(2089): Update user name from to Yonit (T30404) 08/19/20 19:58:40:885 Debug(5660): OtpSaveCredential is save_credential (T30404) 08/19/20 19:58:40:885 Debug(5688): Internal network gateway without OTP authentication (T30404) 08/19/20 19:58:40:885 Debug(5729): Can save user and password. Use saved user credential (T30404) 08/19/20 19:58:40:885 Debug( 41): Roaming profile is false (T30404) 08/19/20 19:58:40:893 Debug( 167): profileInfo username Yonit, profile path (null), server (null) (T30404) 08/19/20 19:58:40:905 Debug(1629): Unserialized non-empty cookie for portal vpn.vpn.com and user Yonit (T30404) 08/19/20 19:58:40:905 Debug(1558): Unserialized empty cookie for portal vpn.vpn.com and pre-logon user. (T30404) 08/19/20 19:58:40:905 Debug(3641): Auth cookie is not empty for user Yonit. Reset bDPGC flag. (T30404) 08/19/20 19:58:40:905 Debug(3644): bIsEmptyUser is 0, bDPGCforManualOnlyGateway is 0, bDPGCNotforManualOnlyGateway is 0 (T30404) 08/19/20 19:58:40:905 Debug(10094): Set to service bUseCCUserGateway 0 and ccUserNameGateway (T30404) 08/19/20 19:58:40:905 Debug( 41): Roaming profile is false (T30404) 08/19/20 19:58:40:914 Debug( 167): profileInfo username Yonit, profile path (null), server (null) (T30404) 08/19/20 19:58:40:925 Debug(1629): Unserialized non-empty cookie for portal vpn.vpn.com and user Yonit (T30404) 08/19/20 19:58:40:925 Debug(1558): Unserialized empty cookie for portal vpn.vpn.com and pre-logon user. (T30404) 08/19/20 19:58:40:925 Debug(6828): use cached deviceSN (T30404) 08/19/20 19:58:40:925 Debug(5460): Get preferred IPv4 for gateway 10.254.254.254 and user Yonit (T30404) 08/19/20 19:58:40:925 Debug(5491): Get preferred IPv6 for gateway 10.254.254.254 and user Yonit (T30404) 08/19/20 19:58:40:925 Debug(3785): Actual user for gateway login is Yonit (T30404) 08/19/20 19:58:40:925 Debug(3789): Gateway selection type is auto (T30404) 08/19/20 19:58:40:925 Debug(6828): use cached deviceSN (T30404) 08/19/20 19:58:40:925 Debug(9907): Need to check gateway cert for internal.vpn.vpn.local (T30404) 08/19/20 19:58:40:925 Debug(2621): encpostdata, encpostdata=00000201782484D0, encpostdatalen=864 (T30404) 08/19/20 19:58:40:926 Debug(2790): REQID=137,IPADDR=internal.vpn.vpn.local,PORT=443,URL=/ssl-vpn/login.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T30404) 08/19/20 19:58:40:926 Debug(1299): Send response to client for request https_request (T30404) 08/19/20 19:58:40:986 Debug(2900): receive pan_msg_ping, 1 (T30404) 08/19/20 19:58:40:986 Debug(1643): Serialize non-empty cookie for portal vpn.vpn.com and user Yonit (T30404) 08/19/20 19:58:40:986 Debug( 41): Roaming profile is false (T30404) 08/19/20 19:58:40:993 Debug( 167): profileInfo username Yonit, profile path (null), server (null) (T30404) 08/19/20 19:58:41:004 Debug(1735): Serialized portal user auth cookie to file C:\Users\Yonit\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_6cb8a8d63dbda849b56ad1bc46e5a56.dat. 598 bytes. (T30404) 08/19/20 19:58:41:004 Debug(1526): Serialize empty cookie for portal vpn.vpn.com and pre-logon user (T30404) 08/19/20 19:58:41:005 Debug(1533): SerializePortalPrelogonAuthCookie to file PanPPAC_a1ff168f86b8749c54b89a5a237cfe52.dat (T30404) 08/19/20 19:58:41:005 Debug(4181): Gateway internal.vpn.vpn.local has hip-report-version: 4 (T30404) 08/19/20 19:58:41:005 Debug(4196): Managed is unknown (T30404) 08/19/20 19:58:41:005 Debug(4200): Gateway internal.vpn.vpn.local's location is (T30404) 08/19/20 19:58:41:005 Debug(3160): gateway internal.vpn.vpn.local does not need tunnel. (T30404) 08/19/20 19:58:41:005 Debug(3174): returns TRUE. (T30404) 08/19/20 19:58:41:005 Debug(5934): --Set state to Discovery complete (T30404) 08/19/20 19:58:41:005 Debug( 911): Display hip report V4 on the UI (T30404) 08/19/20 19:58:41:006 Debug( 459): DiscoverInternal: retry count remain=-1, 0 gateway(s) to be retried for next round. (T30404) 08/19/20 19:58:41:006 Debug(4809): NetworkDiscoverThread: SetEvent network discover ready event for internal network discovery. (T30404) 08/19/20 19:58:41:006 Debug(5934): --Set state to Discovery complete (T30404) 08/19/20 19:58:41:006 Debug( 911): Display hip report V4 on the UI (T30404) 08/19/20 19:58:41:006 Debug( 516): Reset hip report quit event (T30404) 08/19/20 19:58:41:006 Debug( 567): pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\dalog.dat (T30404) 08/19/20 19:58:41:006 Debug(9842): SetVpnStatus called with new status=1, Previous Status=1 (T30404) 08/19/20 19:58:41:007 Debug(4112): UpdatePrelogonStateForSSO() - User-logon tunnel state = Connected (T30404) 08/19/20 19:58:41:007 Debug(4981): NetworkDiscoverThread: PortalStatus is 2, HasLoggedOnGateway is 1 (T30404) 08/19/20 19:58:41:007 Debug(5069): Reset NetworkDiscovery waitTime to 5 seconds. (T30404) 08/19/20 19:58:41:007 Debug(4634): NetworkDiscoverThread: wait for network discover event. (T6492) 08/19/20 19:58:41:010 Debug(11723): Portal's ipv4 address 222.222.222.222 (T6492) 08/19/20 19:58:41:010 Debug(6945): SSO enable status is 0, user name is Yonit, domain name is . (T6492) 08/19/20 19:58:41:010 Debug(2178): open http session. agent is PAN GlobalProtect/5.0.7-2 (Microsoft Windows 10 Pro for Workstations , 64-bit) (T6492) 08/19/20 19:58:41:011 Debug( 456): winhttp SetSecureProtocol, hSession=78216300, bAllProtocol=0, gbFips=0 (T6492) 08/19/20 19:58:41:011 Debug( 456): winhttp SetSecureProtocol, hSession=782160c0, bAllProtocol=0, gbFips=0 (T6492) 08/19/20 19:58:41:012 Debug(1651): SetProxyForHost(https://vpn.vpn.com/ 😞 timeout:180 AutoDetect:1 url: proxy: bypass: proxystr: (T6492) 08/19/20 19:58:41:012 Debug(5979): ----Portal Pre-login starts---- (T6492) 08/19/20 19:58:41:012 Debug(4323): TriggerCaptivePortalDetection() return due to captive portal detection is in progress (0) or PreLogin is Done (1) (T6492) 08/19/20 19:58:41:017 Debug( 550): Network is reachable (T6492) 08/19/20 19:58:41:018 Debug(6005): Pre-login...,verifyportalcert=yes (T6492) 08/19/20 19:58:41:018 Debug(9690): Check cert of server 222.222.222.222 (T6492) 08/19/20 19:58:41:019 Debug( 777): SSL connecting to 222.222.222.222 (T6492) 08/19/20 19:58:41:024 Debug( 550): Network is reachable (T20908) 08/19/20 19:58:47:859 Debug( 334): PanGpHipMp.exe exit for checking misssing patches. (T20908) 08/19/20 19:58:47:859 Debug( 396): CheckHipMissingPatchInOtherProcess(): exits. (T20908) 08/19/20 19:58:47:859 Debug( 474): Hip missing patch checking duration is 7 (T11972) 08/19/20 19:58:56:880 Debug( 139): Got hip report in other process ready event. (T11972) 08/19/20 19:58:56:880 Debug( 158): Read output from PanGpHip.exe (T11972) 08/19/20 19:58:56:880 Debug( 195): write hip file now (T11972) 08/19/20 19:58:56:880 Debug( 221): CheckHipInOtherProcess() sets hip report ready event. (T11972) 08/19/20 19:58:56:880 Debug( 135): Wait for the ready event of hip report generated in other process. (T29520) 08/19/20 19:58:56:880 Debug(5152): HipReportThread: got HIP report ready event. (T29520) 08/19/20 19:58:56:880 Debug(5168): HipReportThread: wait for network discover ready event. (T29520) 08/19/20 19:58:56:880 Debug(5173): HipReportThread: got network discover ready event. (T29520) 08/19/20 19:58:56:940 Debug(6828): use cached deviceSN (T29520) 08/19/20 19:58:56:940 Debug(5253): Sending hip report delay max registry setting is -1 seconds (T29520) 08/19/20 19:58:56:940 Debug(5255): Set max sending hip report delay to default 1800 seconds (T11972) 08/19/20 19:58:58:034 Debug( 143): Got event for PanGpHip process has quited. (T11972) 08/19/20 19:58:58:034 Debug( 338): CheckHip over (T11972) 08/19/20 19:58:58:034 Debug( 282): Hip checking is not initiated by clicking resubmit host profile. (T11972) 08/19/20 19:58:58:034 Debug( 216): HipCheckThread: wait for hip check event for 3600000 ms); (T20908) 08/19/20 19:59:01:860 Debug( 442): HipMissingPatchThread: now is 1597856341, last hip check is 1597856320, hip check interval is 3600000 (T20908) 08/19/20 19:59:01:860 Debug( 447): HipMissingPatchThread: wait 3565000 ms
... View more
03-06-2019
04:37 AM
1. What is the interval for HIP reports that the GP client sends to the gateway? 2. Is it configurable? 3. What triggers HIP report sending?
... View more
12-03-2017
07:37 AM
1 Kudo
Once the failover condition is met(failure is detected), the time it takes for failover should be same, manual or automatic. The time to detect the failure may be different depending on the type of the failure and your configuration if applicable in case of automatic failure. Depending on the failure that creates the failover, automatic failover might cause more packet loss. If the link failure happens on the firewall port, meaning that the port on the firewall is disconnected (not the remote port connected to switch router), I would say firewall would detect it fairly quickly. In such a case the failover should be triggered immediately, just like suspend. If your network does not tolerate potential latency during failover, we would recommend you to do a failover test to make sure what would be the exact delay in case a failover triggered by link failure will happen. The overall end-user impact may be affected by surrounding L2/L3 network design as well. But if you need to failover due to a maintenance activity we recommend to use suspend functionality. It is easier to control the failover via suspend and the failover will be initiated immediately.
... View more
06-13-2017
06:37 AM
I found the issue. (Strange but working) A specific VDSL router model Netgear VEGN2610 was the issue. Also the issue occured only when connected to a specific ISP (www.bezeqint.net/english). I had the issue in 4 different users / locations Once I replaced the router, the issue was resolved.
... View more
03-12-2017
04:45 AM
GP client disconnects from VPN every 5 minutes for about 60 seconds. During the disconnection the is no connectivity to internal resources (Chenking pings for example). Internet connectivity is OK during the disconnection. The issue is related to internet connection (User / Laptop works fine on another location.) After 60 seconds the client detects the disconnection and reconnects without entering the user / pass again This is what I see in debug log: T6940) 03/12/17 11:41:51:743 Info ( 708): Too many outstanding keepalive, timeout (T6940) 03/12/17 11:41:51:743 Info ( 413): VPN timeout -1, get out of ProcMonitor (T6940) 03/12/17 11:41:51:744 Debug( 218): Disconnect udp socket (T6940) 03/12/17 11:41:51:744 Debug( 314): unset network (T6940) 03/12/17 11:41:51:744 Debug(2065): Unset 36 routes (T6940) 03/12/17 11:41:51:750 Debug( 722): no flushdns key set (T6940) 03/12/17 11:41:51:750 Debug(3852): DLSA, savedMetric1Routes not present, do not need to restore (T6940) 03/12/17 11:41:51:750 Debug(3340): DLSA, RestoreProxySetting now (T6940) 03/12/17 11:41:51:750 Debug(3357): ProxyDisabledByMe is false or not present, leave RestoreProxySetting now (T6940) 03/12/17 11:41:51:765 Debug( 620): PreviousDNSInfo not exit, do not need to restore, ret=00000002 (T6940) 03/12/17 11:41:51:765 Debug( 486): remove dns setting failed with ret = 00000002 (T6940) 03/12/17 11:41:51:819 Debug(1834): UnsetDNSSuffixSearchOrder returns 0 (T6940) 03/12/17 11:41:51:839 Debug(1839): UnsetDNSServerSearchOrder returns 0 (T6940) 03/12/17 11:41:51:853 Debug(1841): UnsetWINSServer returns 68 (T6940) 03/12/17 11:41:51:854 Debug( 160): Trying to do ipsec connection to 62.219.50.56[4501] (T6940) 03/12/17 11:41:51:854 Info ( 172): Connected to: 62.x.x.x[4501], Sending keep alive to ipsec socket... (T6940) 03/12/17 11:41:51:868 Info ( 204): Connected ipsec to 62.x.x.x(4501) (T6940) 03/12/17 11:41:51:868 Info ( 248): tunnel to 62.x.x.x connected (T6940) 03/12/17 11:41:51:893 Debug( 266): PsvRegister done (T6940) 03/12/17 11:41:51:893 Debug( 435): Retry start succeeded Any ideas?
... View more
02-28-2017
03:07 AM
Thx So there is nothing at all I should ever copy from system state to another machine, right?
... View more
02-28-2017
02:58 AM
Thank you But what about parameters like tcp-reject-non-syn for example?
... View more
02-28-2017
02:47 AM
Yes - replacing a machine. When I replace a machine, how can I copy all these settings (Assuming some of them were changed)
... View more
02-28-2017
01:52 AM
Hi How can I Export / Import system state global parameters such as cfg.general.max-arp shown in command: show system state Thx
... View more
08-22-2014
09:09 AM
1 Kudo
HULK is right, Therefore PaloAlto is unable to allow a specific Application explicitly if it has dependencies, without allowing the dependencies as well. There are many applications that are depends on web-browsing and ssl and allowing them would create a big "hole"
... View more
08-22-2014
09:03 AM
As far as I know there is no solution for this issue at this time. Some of my customers have hundreds of rules with dependencies and they are unable to read hundreds of warnings every time they make a "commit".
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-05-2023
07:59 AM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks