Is there a way to change the tunnel keepalive timeout on GlobalProtect?

Is there a way to change the tunnel keepalive timeout on GlobalProtect?

40273
Created On 09/26/18 20:46 PM - Last Modified 07/07/20 22:25 PM


Symptom
Is there a way to change the tunnel keepalive timeout on GlobalProtect Client?

Environment
  • Any PAN-OS.
  • GlobalProtect App/Client settings.


Resolution
  1. The tunnel keepalive on client, used for checking if the GlobalProtect Gateway is up or not, cannot be adjusted.
  2. GlobalProtect client sends a keepalive every 10 seconds and if there is no response from the Gateway for 50 seconds, tunnel is torn down.


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000Cm5X&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Attachments
Choose Language