About K12PaloAlto

@BPry wrote: @K12PaloAlto personally we chose to continue to use the ASA simply as a VPN gateway and moved all firewall functions over the the Palo Alto. If you already have the equipment maintaining the AnyConnect license (if it isn't perpetual) is very cheap to do; and if your ASA is only going to provide VPN then you can get away with a much smaller unit. The GlobalProtect client for most of our users was 'good enough', however those that did complain brought up valid reasons to continue to use AnyConnect.   @BPry  Thank you for your comment.  We are also using a similar approach currently, but I guess I'm just disapointed that we have to entertain that option for reliable VPN. ... View more

@jmenon wrote: @K12PaloAlto wrote: Is there any way to add the auto reconnect funcationality that anyconnect has.  It has happened to me a few times where I have dropped connection on global protect for whatever reason, and the client will still show as connected even though I can no longer reach the remote network.  My local network is still ok and can surf the web.  The anyconnect client on the other hand will reconnect when this happens, and also recognize when it can no longer reach the remote network.  If it happens to me, it will happen to end users. If you set the connect method to user-logon the client will auto reconnect. if the connect method is set to on-demand the client will not auto reconnect for most part. However if the client is still showing as connected even though it is not you will want to open a support case with us and allow our support engineer to investigate the source of disconnect and wrong status   I am using the on-demand option for connection with split tunnel.  I was not able to replicate a local wireless disconnect without the new client (3.1.0) detecting it.  That said, there still seems to be an issue if drops are occuring after the laptop.  I simulated a AP failure where another AP picked up connection.  GP client still showed connected during this time.  I am able to ping local router, but unable to ping over VPN tunnel.  The first time it did not recover, and I disconnected and reconnected.  The second time I tested runing a constant ping of a destination over the VPN, and it did recover.  YMMV  I used the AP's as an example to introduce slight packet loss.  When users are connecting from residential internet connections...  I need something reliable and easy for the end user.   A quick search on google found this page from a university. (not affiliated) http://www.northeastern.edu/its/howto/globalprotect-windows-issues/   "Sometimes on Windows, a dropped network connection will not fully disconnect the GlobalProtect client – the client will keep trying to connect without success, even once the network connection is back."   @jmenon  This VPN client is the one thing holding me back from decommissioning our ASA.  If we can get the client where it is at least equivalent to Anyconnect, I will be a happy camper.  If there is an avenue that would be better for me to offer suggestions, please let me know.   ... View more

Is there any way to add the auto reconnect funcationality that anyconnect has.  It has happened to me a few times where I have dropped connection on global protect for whatever reason, and the client will still show as connected even though I can no longer reach the remote network.  My local network is still ok and can surf the web.  The anyconnect client on the other hand will reconnect when this happens, and also recognize when it can no longer reach the remote network.  If it happens to me, it will happen to end users. ... View more

Add me to the list of dissatisfied in comparison to anyconnect. ... View more