SSLVPN Tunnel is Disconnected Every 50 Seconds in Dual Stack IPv4/IPv6 Deployment

SSLVPN Tunnel is Disconnected Every 50 Seconds in Dual Stack IPv4/IPv6 Deployment

4188
Created On 04/19/24 05:51 AM - Last Modified 07/17/25 19:14 PM


Symptom


  • GlobalProtect (GP) App on windows client with Dual Stack IPv4/IPv6.
  • The SSLVPN tunnel to GP Gateway is disconnected and reconnected every 50 seconds.

Environment


  • Palo Alto Firewalls
  • PAN-OS 11.0.x, 11.1.x 10.2.x 10.1.x and 9.1.x
  • GlobalProtect(GP) Gateway with Dual stack IPv4/IPv6 configured
  • GP App with dual stack IPv4/IPv6.
  • GlobalProtect SSLVPN tunnel.

Cause


Software issue.

Resolution


  1. The issue is resolved under PAN-248105. 
  2. PAN-OS Upgrade to the one of the following versions or above to resolve the issue.
    • 9.1.20
    • 11.1.5
    • 11.0.7
    • 10.2.11
    • 10.1.14
    • 11.2.2
  3.  The issue is also fixed in hotfix releases 10.1.13-h1, 10.2.8-h4, 10.2.9-h6.
  4. The workaround is to disable IPv6 on SSLVPN tunnel client.
    Other users also viewed:
    Actions
    • Print
    • Copy Link

      https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CrNDCA0&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

    Choose Language