USB 连接到全球保护后断开连接的设备

USB 连接到全球保护后断开连接的设备

9838
Created On 01/23/20 17:42 PM - Last Modified 03/26/21 18:04 PM


Symptom


客户端在全球 USB 保护隧道建立后,其所有设备都与系统断开/移除。

Environment


  • PA-3020
  • PANOS 8.1.11
  • 全球保护代理 5.0.5


Cause


从全局保护代理日志中,我们看到设备已被删除 :"DBT_DEVICEREMOVECOMPLETE,设备"
(T13928) 12/02/19 16:00:21:168 Debug( 371): Receive gps message with type status.
(T13928) 12/02/19 16:00:21:168 Debug(1216): ===> response sent to GPI = <response><type>status</type><state>Connected
 </state><error></error><disabled>no</disabled></response>
(T13928) 12/02/19 16:00:21:181 Debug(2130): pangps status is Connected.
(T13928) 12/02/19 16:00:21:181 Debug( 403): Portal is connected.
(T13928) 12/02/19 16:00:21:181 Debug( 568): CPanBaseConfigMgr::AddPortal - portal domain.domain.com is already in list.
(T13928) 12/02/19 16:00:21:181 Debug( 568): CPanBaseConfigMgr::AddPortal - portal domain.domain.com is already in list.
(T13928) 12/02/19 16:00:21:182 Debug(2599): receive resize message from 1, and new height is 243.
(T13928) 12/02/19 16:00:22:772 Debug( 766): CAC, type is 0007, data=0000000000000000
(T13928) 12/02/19 16:00:22:773 Debug( 766): CAC, type is 0007, data=0000000000000000
(T13928) 12/02/19 16:00:22:987 Debug( 766): CAC, type is 8004, data=0000001ECB0FF8D0
(T13928) 12/02/19 16:00:22:987 Debug( 810): CAC, DBT_DEVICEREMOVECOMPLETE, device type=00000005, cacUnplugLogout=0
(T13928) 12/02/19 16:00:22:987 Debug( 851): CAC, do nothing for device remove message
(T13928) 12/02/19 16:00:23:412 Debug( 766): CAC, type is 8000, data=0000001ECB0FF8D0
(T13928) 12/02/19 16:00:23:413 Debug( 692): CAC, name is USB


 


Resolution


  1. 从 Firewall , 点击 : GUI 网络> 门户>代理> 选择代理配置>应用程序
  • 有一个功能称为:在智能卡删除(仅窗口)上保留连接
  • 默认值选择为 "是"
  1. 更改功能:将智能卡删除的连接(仅窗口)保留"否"
  2. 提交 更改。


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PONMCA4&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language