Our VPN users are complaining that after being connected for over 1 hour they get disconnected by global protect. They have to close global protect and reopen to connect back. We have remote customer service agents that get disconnected up to 4 to 5 times a day. We are running global protect version 2.3.3-5. We have opened a ticket with support and have escalated and had no success. Anybody else having this issue? Any luck getting resolved.
86803 Fixed an intermittent issue where the idle timer for GlobalProtect IPSec tunnels either did
not expire appropriately (such as when the tunnel was torn down) or expired at the
configured idle time expiration even when a user was actively using the connection. With
this fix, the GlobalProtect IPSec tunnel idle timer behaves as expected.
It is fixed in 7.0.4 and 6.1.8 (allthough it isn't mentioned in the 6.1.8 release document)
Can confirm it is working on 6.1.8 and 7.0.4, you should REALLY upgrade to the 7.0.4 release, it is night and day in comparison to the 7.0.1-7.0.3 releases.
From the logs on the client I see that the service sees a packet that seems to corrupted and this causes the service to close the connection.
(T15964) 12/22/15 10:17:52:802 Error( 306): read(zero byte) failed: 0 >>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 184): Error processing receive data from client>>>>> !!!
(T15964) 12/22/15 10:17:52:802 Info ( 190): close client socket
(T15992) 12/22/15 10:17:52:894 Debug( 142): CheckPanGpAgentThread: PanGPA process 15984 exits, ret is 00e88eb0.
(T15992) 12/22/15 10:17:52:894 Debug( 150): GlobalProtect agent terminates unexpectedly. Skip StopThreads().>>>>> !!!
Everytime we close out the connection, it is because of this packet that we see. On the firewall I see that the client disconnects with the firewall.
As of now Support nor Engineering has an answer.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!