Palo Alto GlobalProtect VPN - What DoIT will need to troubleshoot client connectivity issues
This document outlines the necessary information for troubleshooting a user's problems when connecting to a Palo Alto VPN termination point using the GlobalProtect VPN client.
Information to Gather
-
Full name
-
NetID
-
Time the problem was seen.
-
What VPN are they connecting to. (ie: uwmadison.vpn.wisc.edu)
-
IP address
-
Shown in Google Search: "What Is My IP". You may need to scroll down to find it.
-
-
Output from Collect Logs
- Right-click on the GlobalProtect VPN Client icon in the system tray
-
Click the hamburger button in the top right of the GlobalProtect window
- Click Settings
- In the Troubleshooting tab, click the Collect Logs button
- Select where you want the logs to be stored in your File Explorer and click Select Folder
- The logs will be downloaded to your computer in a GlobalProtectLogs.zip file.
- Send the log file to the ticket owner for review.
- Right-click on the GlobalProtect VPN Client icon in the system tray
Important: Please don't do the following before the above is complete. It erases the existing logs and starts over.
-
Default Log Settings (either PanGP Service or PanGP Agent)
- Right-click on the GlobalProtect VPN Client icon in the system tray
- Click the hamburger button in the top right of the menu
- Click Settings
- In the Troubleshooting tab, click Advanced
- Check if the Debug Level is set to "PanGP Service" or "PanGP Agent"
- Please send this to the ticket owner.
- Right-click on the GlobalProtect VPN Client icon in the system tray
-
(Not always needed) Open up the GlobalProtect folder on your machine, IE: C:\Program Files\Palo Alto Networks\GlobalProtect
-
Send the following files to the ticket owner, if they exist:
-
"PanGPS.log.old"
-
"PanGPA.log.old"
-
"PanGPUninstaller.log"
-
"PanGpHip.log.old"
-
-