Why we are seeing "WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12002 " in Global Protect logs?
17431
Created On 02/20/20 04:27 AM - Last Modified 04/21/20 00:19 AM
Question
Why we are seeing "WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12002 " in Global Protect logs of the client machine?
(T2716) Debug( 488): Command = <request><type>pan_msg_ping</type><result>3</result></request>
(T2300) Info (2184): PanWinhttpCallback(dwInternetStatus=WINHTTP_CALLBACK_STATUS_REQUEST_ERROR,
this=0000000001C3B570)
(T2300) Debug(2251): WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12002, result=5
(T2368) Info (1219): winhttpObj, get WINHTTP_CALLBACK_STATUS_REQUEST_ERROR
(T2368) Error(1246): error = ERROR_WINHTTP_TIMEOUT
(T2368) Error(3207): winhttpObj, error! ipaddress 10.193.91.65
bRetryWithoutCert is 0, bClientCertNeeded=0
(T2368) Info (2184): PanWinhttpCallback(dwInternetStatus=WINHTTP_CALLBACK_STATUS_HANDLE_CLOSING,
this=0000000001C3B570)
Environment
- PAN-OS 8.1 and above.
- Global Protect configured
Answer
The messages are seen on Client machine GPA logs. The error message indicates pre-login SSL request to Portal is failing because SSL port 443 on the configured IP address is not reachable.
To troubleshoot, check the firewall traffic logs to see the reasons for failure.