Is there a way to change the tunnel keepalive timeout on GlobalProtect?

Is there a way to change the tunnel keepalive timeout on GlobalProtect?

63229
Created On 09/26/18 20:46 PM - Last Modified 07/07/20 22:25 PM


Symptom


Is there a way to change the tunnel keepalive timeout on GlobalProtect Client?

Environment


  • Any PAN-OS.
  • GlobalProtect App/Client settings.

Resolution


  1. The tunnel keepalive on client, used for checking if the GlobalProtect Gateway is up or not, cannot be adjusted.
  2. GlobalProtect client sends a keepalive every 10 seconds and if there is no response from the Gateway for 50 seconds, tunnel is torn down.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kCSArticleDetail?id=kA10g000000Cm5X&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkCSArticleDetail

Choose Language