How to disable gzip encoding if clientless vpn have issues accessing application server like Javascript
10586
Created On 02/23/23 13:58 PM - Last Modified 06/09/23 14:02 PM
Objective
If Clientless VPN is having issues with accessing some gzip enabled application server then gzip encoding can be disabled. This article explains how it can be done.
Environment
- Palo Alto Firewalls
- PAN-OS 10.1.8 or higher.
- Global protect Clientless VPN.
- Gzip encoding.
Procedure
It can be done from CLI using following commands.
- To disable clientless vpn gzip encoding
debug global-protect portal clientlessvpn gzip-encoding off
- To enable clientless vpn gzip encoding
debug global-protect portal clientlessvpn gzip-encoding on
- To check the status of clientless vpn gzip encoding
debug global-protect portal clientlessvpn gzip-encoding show
Additional Information
Clientless vpn might be having issue access gzip enabled (most of the normal application will enable gzip by default) application server.
when opening the clientless rewritten js file, we can only see "pan_eval((function(){" in the front, but no "}).toString().slice(12, -2),"");" in the end, causing js file syntax error
Note: These commands were introduced in 11.0.0, 10.2.4, 10.1.9, 10.1.8-h2