Palo Alto Networks Knowledgebase: GlobalProtect Client Error: did not find portal address

GlobalProtect Client Error: did not find portal address

20663
Created On 02/07/19 23:46 PM - Last Updated 02/07/19 23:46 PM
Resolution

Issue

GlobalProtect client returns the following error when attempting to connect:

(T36952) 05/16/12 23:08:31:127 Error( 98): Failed to open sub key 'S'

(T36952) 05/16/12 23:08:31:128 Error( 310): did not find Portal address.

(T36952) 05/16/12 23:08:31:169 Info ( 169): PanGPA started, pid = 36928l

(T36952) 05/16/12 23:08:31:758 Info ( 26): create thread 00000228

(T36952) 05/16/12 23:08:31:758 Info ( 26): create thread 0000022C

(T36952) 05/16/12 23:08:31:758 Info ( 26): create thread 00000230

(T28844) 05/16/12 23:08:31:759 Info (1752): HipMonitorThread starts

(T28844) 05/16/12 23:08:31:837 Info (1763): HipMonitorThread wait for exit event.

(T36952) 05/16/12 23:08:31:888 Info ( 26): create thread 000002E8

(T36952) 05/16/12 23:08:32:199 Error( 47): Failed to open sub key 'S'

(T36952) 05/16/12 23:08:32:242 Info ( 379): InitConnection ...

(T36952) 05/16/12 23:08:32:290 Info ( 387): Connecting to Pan MS Service end

(T38792) 05/16/12 23:08:51:759 Info (1824): HipThread: got check hip event or time out.

Resolution

The error implies that the portal is not reachable. Here are some things to verify:

  1. The correct IP address into the Global Protect Client Configuration on the Firewall.
  2. Ping the portal from the workstation (might not work if firewall is not configured to respond to ping packets)
  3. Check the Security policies on the PAN firewall to see if the correct app-IDs are permitted, e.g ssl, panos-global-protect
  4. Disable the local anti-virus firewall on the workstation.
  5. Re-install the GlobalProtect client

owner: bsyeda



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltTCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language