User Tools

Site Tools


paloaltonetworks:troubleshooting:global_protect

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
paloaltonetworks:troubleshooting:global_protect [2020/05/29 09:35] bstaffordpaloaltonetworks:troubleshooting:global_protect [2022/11/23 12:49] (current) – external edit 127.0.0.1
Line 6: Line 6:
  
 ===== PanGP Service Logs ===== ===== PanGP Service Logs =====
- 
- 
  
 **Sections of Service Logs** **Sections of Service Logs**
Line 30: Line 28:
     * ''--Set state to Discovery complete''     * ''--Set state to Discovery complete''
  
 +===== Users Connecting with SSL =====
 +Get a log file dump from the endpoint GlobalProtect and open the ''PanGPS.log'' file.
 +
 +Look for the following to explain why SSL is being used 
 +<code>Debug( 463): Network is reachable
 +Info ( 174): Connected to: 1.2.3.4[4501], Sending keep alive to ipsec socket...
 +Info ( 217): failed to receive keep alive
 +Debug( 226): Disconnect udp socket 
 +Info ( 307): Connecting to 1.2.3.4 failed
 +Info ( 226): Start vpn do_connect() failed
 +Debug( 281): do_disconnect is called in VPN stop
 +Debug( 485): ipsec failed to start</code>
 +
 +
 +===== Check Endpoint CLient is Running =====
 +For Macs perform the following (Via Terminal):
 +<code>netstat -an | grep 4767</code>
 +For Windows, perform the following (Via CLI):
 +<code>netstat -an | find "4767"</code>
  
  
  
paloaltonetworks/troubleshooting/global_protect.1590744912.txt.gz · Last modified: (external edit)