This site requires JavaScript to be enabled
An updated version of this article is available

GlobalProtect Remote Access VPN - Errors and Resolutions

3063 views

66.0 - Updated on 11-25-2024 by Eric Taylor (elt143)

65.0 - Updated on 06-03-2024 by Eric Taylor (elt143)

64.0 - Updated on 05-30-2024 by Eric Taylor (elt143)

63.0 - Updated on 05-10-2024 by Tom Bayly (txb151)

62.0 - Updated on 04-29-2024 by Eric Taylor (elt143)

61.0 - Updated on 04-04-2024 by Eric Taylor (elt143)

60.0 - Updated on 09-28-2023 by Eric Taylor (elt143)

59.0 - Updated on 09-17-2023 by Eric Taylor (elt143)

58.0 - Updated on 06-01-2023 by Eric Taylor (elt143)

57.0 - Updated on 05-24-2023 by Eric Taylor (elt143)

56.0 - Updated on 05-04-2023 by Tom Bayly (txb151)

55.0 - Updated on 02-21-2023 by Tom Bayly (txb151)

54.0 - Updated on 01-03-2023 by Eric Taylor (elt143)

53.0 - Updated on 01-03-2023 by Eric Taylor (elt143)

52.0 - Updated on 12-12-2022 by Eric Taylor (elt143)

51.0 - Updated on 11-15-2022 by Eric Taylor (elt143)

50.0 - Updated on 10-31-2022 by Kevin M (kbm2)

49.0 - Updated on 10-18-2022 by Eric Taylor (elt143)

48.0 - Updated on 08-01-2022 by Eric Taylor (elt143)

47.0 - Updated on 07-28-2022 by Eric Taylor (elt143)

46.0 - Updated on 07-15-2022 by Tom Bayly (txb151)

45.0 - Updated on 04-13-2022 by Michael Giornesto (mcg12)

44.0 - Updated on 04-12-2022 by Michael Giornesto (mcg12)

43.0 - Updated on 04-12-2022 by Michael Giornesto (mcg12)

42.0 - Updated on 04-06-2022 by Penny Hockenberry (pqb4)

41.0 - Updated on 02-14-2022 by Gregory Fox (gdf24)

40.0 - Updated on 02-07-2022 by Michael Giornesto (mcg12)

39.0 - Updated on 02-07-2022 by Edward Wilson (emw10)

38.0 - Updated on 02-04-2022 by Edward Wilson (emw10)

37.0 - Updated on 12-02-2021 by Michael Giornesto (mcg12)

36.0 - Updated on 12-02-2021 by Michael Giornesto (mcg12)

35.0 - Updated on 12-02-2021 by Michael Giornesto (mcg12)

34.0 - Updated on 11-08-2021 by Michael Giornesto (mcg12)

33.0 - Updated on 11-08-2021 by Michael Giornesto (mcg12)

32.0 - Updated on 09-21-2021 by Michael Giornesto (mcg12)

31.0 - Updated on 08-27-2021 by Michael Giornesto (mcg12)

30.0 - Updated on 07-23-2021 by Michael Giornesto (mcg12)

29.0 - Updated on 06-29-2021 by Ian Sproat (ixs33)

28.0 - Updated on 06-21-2021 by Gregory Fox (gdf24)

27.0 - Updated on 06-18-2021 by Tom Bayly (txb151)

26.0 - Updated on 06-15-2021 by Michael Giornesto (mcg12)

25.0 - Updated on 06-08-2021 by Michael Giornesto (mcg12)

24.0 - Updated on 06-07-2021 by Michael Giornesto (mcg12)

23.0 - Updated on 05-26-2021 by Michael Giornesto (mcg12)

22.0 - Updated on 05-25-2021 by Michael Giornesto (mcg12)

21.0 - Updated on 05-18-2021 by Michael Giornesto (mcg12)

20.0 - Updated on 05-12-2021 by Michael Giornesto (mcg12)

19.0 - Updated on 04-20-2021 by Michael Giornesto (mcg12)

18.0 - Updated on 04-14-2021 by Michael Giornesto (mcg12)

17.0 - Updated on 04-13-2021 by Michael Giornesto (mcg12)

16.0 - Updated on 04-06-2021 by Michael Giornesto (mcg12)

15.0 - Updated on 03-26-2021 by Michael Giornesto (mcg12)

Article Intended For

IT Staff involved in supporting users of the GlobalProtect Remote Access VPN Service.

Introduction

This article documents possible errors that may be presented to users of the GlobalProtect Remote Access VPN service, as well as provide a resolution when possible.

Article Body

Click on an error message below to jump to the associated description and other information:

Authentication Failed
Please contact the administrator for further assistance
Error code: -1

Display

Image of Error:  Authentication Failed, Please contact the administrator for further assistance. Error code -1.png


Description

User has not been provisioned by their local Unit IT for GlobalProtect VPN use. 


Resolution

User's local IT Unit must provision the user in the Unit's appropriate EAD security group for authentication to GlobalProtect VPN.

Open or reassign a SNow Incident to user's local Unit IT Assignment Group



Connection Failed
You are not authorized to connect to GlobalProtect Portal.

Display

Image of GlobalProtect agent error: Connection Failed, You are not authorized to connect to GlobalProtect Portal


Description

User has not been provisioned by their local Unit IT for GlobalProtect VPN use. 


Resolution

User's local IT Unit must provision the user in the Unit's appropriate EAD security group for authentication to GlobalProtect VPN.

Open or reassign a SNow Incident to user's local Unit IT Assignment Group



Authentication Failed.  Enter login credentials
Error: Incorrect username or password

Display

ERROR IMAGE_Authentication Failed-Enter login credentials_Error-Incorrect username or password.png


Description

If this error is present on a Linux host, then the userid may have exceeded 5 incorrect login attempts resulting in the account being locked. 


Resolution



Connection Failed
Failed to get default route entry

Display

Image of GlobalProtect VPN agent error: Connection Failed, Failed to get default route entry


Description
Resolution
  1. In Windows cmd, run > sc delete PanGPS >
  2. Remove the following key - HKEY_CURRENT_USER\Software\Palo Alto Networks
  3. Remove the following key - HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks
  4. Delete the following folder/directory - C:\Program Files\Palo Alto Networks >
  5. Delete the following folder C:\Users\User\AppData\Local\Palo Alto Networks
  6. Uninstall the 3rd party VPN softwares and other softwares which can deny the route table modification.
  7. Reboot
  8. Reinstall the GP software.

Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPWeCAO



Connection Failed: Could not connect to the GlobalProtect gateway.  Please contact your IT administrator

Display

Connection Failed - Could not connect to the GlobalProtect gateway.  Please contact your IT administrator.

Description
Resolution
  1. Stop the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Service Status: Stop
  2. Disable the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Startup Type: Disable
  3. Delete directories and files
    • "C:\Windows\System32\wbem\Repository" > delete all files contained in this directory
  4. Delete Registry entries:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_CURRENT_USER\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_USERS\ <ALL-REGISTRY-KEYS> \SOFTWARE\Palo Alto Networks\GlobalProtect
  5. Un-install GlobalProtect
    • Control Panel\Programs\Programs and Features>GlobalProtect>Uninstall
  6. Make sure that the virtual adapter in not present in the Network adapter settings - Control Panel\Network and Internet\Network Connections
  7. Reboot the machine
  8. Reinstall GlobalProtect with admin privileges
  9. Confirm that WMI service is running

 

Connection Failed -- VPN connection could not be established.  Please restart your computer to try again.

Display

Connection Failed - VPN connection could not be established.  Please restart your computer to try again.

Description

The PANGP Virtual Ethernet Adapter is not present.  The ethernet adapter may be missing due to a corrupt or incomplete installation, or due to the ethernet adapter being removed since the GlobalProtect agent was previously installed.  The PANGP Virtual Ethernet Adapter should be found at Control Panel\Network and Internet\Network Connections

Resolution

Option A - Reinstall the GlobalProtect agent overtop of the current install.

  1. Download and install the currently supported GlobalProtect agent version from the Penn State Software Request website

https://softwarerequest.psu.edu/

2. Reboot the computer to complete the install and ensure that the normal service startup methods are invoked

3. Verify that the PANGP Virtual Ethernet Adapter is now present.


Option B - Perform a manual uninstall and cleanup of the GlobalProtect agent installation.

  1. Stop the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Service Status: Stop
  2. Disable the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Startup Type: Disable
  3. Delete directories and files
    • "C:\Windows\System32\wbem\Repository" > delete all files contained in this directory
  4. Delete Registry entries:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_CURRENT_USER\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_USERS\ <ALL-REGISTRY-KEYS> \SOFTWARE\Palo Alto Networks\GlobalProtect
  5. Un-install GlobalProtect
    • Control Panel\Programs\Programs and Features>GlobalProtect>Uninstall
  6. Make sure that the virtual adapter in not present in the Network adapter settings - Control Panel\Network and Internet\Network Connections
  7. Reboot the machine
  8. Reinstall GlobalProtect with admin privileges
  9. Verify that the PANGP Virtual Ethernet Adapter is now present.

 

Connection Failed -- Failed to find the PANGP virtual adapter interface

Display

Connection Failed - Failed to find the PANGP virtual adapter interface.png

Description

The PanGPS service is not running, or the GlobalProtect agent install is otherwise corrupt.

Resolution

Option A - Reinstall the GlobalProtect agent overtop of the current install.

  1. Download and install the currently supported GlobalProtect agent version from the Penn State Software Request website

https://softwarerequest.psu.edu/

2. Reboot the computer to complete the install and ensure that the normal service startup methods are invoked


Option B - Perform a manual uninstall and cleanup of the GlobalProtect agent installation.

  1. Stop the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Service Status: Stop
  2. Disable the Windows Management Instrumentation (WMI) service
    • Control Panel\System and Security\Administrative Tools\Services\Windows Management Instrumentation > Startup Type: Disable
  3. Delete directories and files
    • "C:\Windows\System32\wbem\Repository" > delete all files contained in this directory
  4. Delete Registry entries:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_CURRENT_USER\SOFTWARE\Palo Alto Networks\GlobalProtect
    • HKEY_USERS\ <ALL-REGISTRY-KEYS> \SOFTWARE\Palo Alto Networks\GlobalProtect
  5. Un-install GlobalProtect
    • Control Panel\Programs\Programs and Features>GlobalProtect>Uninstall
  6. Make sure that the virtual adapter in not present in the Network adapter settings - Control Panel\Network and Internet\Network Connections
  7. Reboot the machine
  8. Reinstall GlobalProtect with admin privileges
  9. Confirm that WMI service is running


Web Login Service - Stale Request

Display

Web Login Service - Stale Request


Description

The GlobalProtect Remote Access VPN utilizes Penn State's WebAccess system for authentication.  The authentication workflow loads the WebAccess authentication page into a browser kiosk-mode window. The connection to the WebAccess login page is initiated from the computer's network interfaces.  This traffic is not redirected through, tunneled through, or initiated from the GlobalProtect VPN systems.  So, issues connecting to WebAccess are in the path between the originating computer and the WebAccess system located in Penn State's University Park or Hershey Data Centers.


Resolution



Script Error - An error has occurred in the script on this page.

Display

Script Error - An error has occurred in the script on this page.



Description

The GlobalProtect installer for Windows operating systems includes a browser built-in to the agent to display the PSU WebAccess authentication page.  This browser uses Window's Internet Explorer settings, cache, cookies, etc. 

The URL shown in the above screenshot may differ to other user's Script Error message.


Resolution

Clear the cache in the Internet Explorer browser


How to Get Help with the GlobalProtect Remote Access VPN

If you have questions or experience any difficulties, use any of the following methods to contact the IT Service Desk for help: