GlobalProtect SSL VPN connection gets disconnected due to keepalive failure

GlobalProtect SSL VPN connection gets disconnected due to keepalive failure

22696
Created On 02/01/24 09:12 AM - Last Modified 05/01/24 02:51 AM


Symptom


  • GlobalProtect SSL VPN connection gets disconnected due to a timeout.
  • pan_gp_event.log of globalprotect display the following
[Info ]: Auto Gateway login finished with address 192.168.11.1 and user gp.
[Info ]: SSL tunnel creation finished with Gateway 192.168.11.1.
[Info ]: Completed HIP Report check with Gateway 192.168.11.1.
[Info ]: HIP Report submitted to the Gateway 192.168.11.1.
[Info ]: Tunnel is down due to keep-alive timeout. 
[Info ]: Gateway 192.168.11.1: Checking network availability and restoring VPN connection when network is available.
  • PanGPS.log also reports keepalive failures.
Info (1335): --Too many outstanding keepalive and no response from GP gateway, disconnect tunnel
Debug(1338): Tunnel downtime after keep-alive timeout is 51375 ms
Info ( 631): VPN timeout due to keepalive, get out of ProcMonitor
Debug( 646): In timeout handling, tunnel downtime is 51375 miliseconds


Environment


  • Palo Alto Firewalls or Prisma Access Firewalls
  • PAN-OS 9.1.17
  • PAN-OS 10.1.11-h4, 10.1.11-h5, 10.1.12
  • PAN-OS 10.2.7-h3
  • PAN-OS 11.0.3, 11.0.3-h1, 11.0.3-h3
  • PAN-OS 11.1.0 11.1.1
  • GlobalProtect (GP) Gateway
  • GlobalProtect (GP) App


Cause


This is a software issue.

Resolution


The issue ID resolved under PAN-242561 in the following versions
  • PAN-OS 9.1.18
  • PAN-OS 10.1.13
  • PAN-OS 10.2.8
  • PAN-OS 11.0.3-h5, 11.0.4
  • PAN-OS 11.1.2
     
  1. Upgrade to the fixed code will resolve the issue.
  2. As a workaround, use IPSec Connection instead of SSL.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008WvOCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language