What logs are seen in PanGPS.log when URL filter blocks GlobalProtect connection?
8575
Created On 06/15/22 04:17 AM - Last Modified 04/22/23 03:32 AM
Question
What logs are seen in PanGPS.log when URL filter blocks GlobalProtect connection?
Environment
- Palo Alto Firewalls
- Prisma Access - Mobile Users
- Supported PAN-OS
- GlobalProtect (GP)
- PanGPS.log output.
Answer
When GP users are disconnected due to URL filter blocking GlobalProtect connection, the PanGPS.log file shows some typical outputs listed below.
(P5072-T25004)Debug( 564): 04/07/22 08:28:08:830 Network is reachable
(P5072-T25004)Debug(1270): 04/07/22 08:28:08:913 Failed to X509_LOOKUP_load_file
(P5072-T25004)Error( 113): 04/07/22 08:28:08:923 sslvpn connection received unexpected message: (511) HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=UTF-8
Content-Length: XXXX
Connection: close
P3P: CP="CAO PSA OUR"
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
<!DOCTYPE html>
<html lang="en">
<head>
<base href="/login/">
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=.85">
(P5072-T25004)Debug(1346): 04/07/22 08:28:08:923 OpenSSL alert write:warning:close notify
(P5072-T25004)Info ( 364): 04/07/22 08:28:08:923 Connecting to xxx.xxx.xxx.xxx failed
(P5072-T25004)Info ( 276): 04/07/22 08:28:08:923 Start vpn do_connect() failed
Additional Information
To resolve the issue, check the URL filter settings to allow GlobalProtect connections.