Palo Alto GlobalProtect VPN - What DoIT will need to troubleshoot client connectivity issues

This document outlines the necessary information for troubleshooting a user's problems when connecting to a Palo Alto VPN termination point using the GlobalProtect VPN client.

Information to Gather

  1. Full name

  2. NetID

  3. Time the problem was seen.

  4. What VPN are they connecting to. (ie: uwmadison.vpn.wisc.edu)

  5. IP address

  6. Output from Collect Logs

    1. Right-click on the GlobalProtect VPN Client icon in the system tray

      System Tray showing Global Protect icon

    2. Click the hamburger button in the top right of the GlobalProtect window

      Hamburger Icon

    3. Click Settings
    4. In the Troubleshooting tab, click the Collect Logs button

      Troubleshooting tab highlighting the Collect Logs button

    5. Select where you want the logs to be stored in your File Explorer and click Select Folder
    6. The logs will be downloaded to your computer in a GlobalProtectLogs.zip file.
    7. Send the log file to the ticket owner for review.

Important: Please don't do the following before the above is complete. It erases the existing logs and starts over.

  1. Default Log Settings (either PanGP Service or PanGP Agent) 

    1. Right-click on the GlobalProtect VPN Client icon in the system tray

      System Tray showing Global Protect icon

    2. Click the hamburger button in the top right of the menu

      Hamburger Icon

    3. Click Settings
    4. In the Troubleshooting tab, click Advanced

      Troubleshooting tab highlingting the Advanced button

    5. Check if the Debug Level is set to "PanGP Service" or "PanGP Agent"
    6. Please send this to the ticket owner.
  2. (Not always needed) Open up the GlobalProtect folder on your machine, IE: C:\Program Files\Palo Alto Networks\GlobalProtect

    1. Send the following files to the ticket owner, if they exist:

      1. "PanGPS.log.old"

      2. "PanGPA.log.old"

      3. "PanGPUninstaller.log"

      4. "PanGpHip.log.old"



Keywords:
Palo Alto globalprotect VPN wiscvpn hrs department ipsec troubleshoot client connectivity issues 
Doc ID:
76263
Owned by:
Scott B. in Network Services
Created:
2017-08-31
Updated:
2025-02-20
Sites:
DoIT Help Desk, Network Services, Systems & Network Control Center