GlobalProtect VPN Issues

[#1]

Hi there,

I started at a new company in March, and since that time, I have experienced slow VPN connections.  They use GlobalProtect as their VPN solution.

The previous companies that I was with had no issues with VPN connections.  They did not use GlobalProtect for the VPN.

Is there an issue with my connection / VPN connection that is somehow being limited by Plusnet?

This has come to a head, as there was a new software suite that was rolled out over the weekend.  This new software requires a download of data / files each time it starts up, and it is timing out.

Can someone from Plusnet look at my connection and see if there is an problem that can be solved within Plusnet?

Thanks in advance.

Nicholas J Ball

[#2]

Hi @nablik_new
Another thread on this forum has suggested that changing from using a Netgear modem/router to a draytek router resolved the problem. The globalprotect VPN appears sensitive to some router configurations.
https://community.plus.net/t5/Tech-Help-Software-Hardware-etc/Problem-with-Global-Protect-VPN-connec...
What router are you using?

Regards
Richard

[#3]

Hi Richard,

I have a Draytek 2860 router already.  I changed the MTU settings, but, to no avail.

I have spoken to someone at PlusNet and they are changing my static IP address.

Hopefully, that will solve it!

Thanks for replying though.  I will take a look at that link that you gave me.

Best regards,

Nicholas J Ball

[#4]

Hi
This is probably a red herring...
I had an issue with a very slow VPN years ago.
I wish I could remember the software vendor...
Anyway the VPN running slow was resolved by enabling responses to ICMP pìngs on the WAN.
I guess the VPN was using the ping responses as a keep alive signal?
Richard

[#5]

Hi Richard,

I changed the settings to allow ICMP pings on the WAN.  That did not improve things.

Plusnet have now changed my static IP address.  Guess what?  That did not improve things.

It seems that my only option now is to change to another ISP that does not have issues with GlobalProtect VPN.

I had thought that in the current climate, that VPN usage would be a marketing angle.

Anyway, thanks again for your help.

Best regards,

Nicholas J Ball

[#6]

Hi
Have you proven that the issue is caused by Plusnet and not the router?
Before moving ISP and perhaps finding the same issue, I would recommend trying a different router.
Or setting the draytek to bridge mode and using the PC to establish the PPPoE login to Plusnet.
It would also be a good test to try the Draytek and the VPN at a friend or familiy house who are with a different ISP.
Regards
Richard

[#7]

Hi Richard,

I have tried using my mobile Hotspot, and also using the BTOpenreach modem that was supplied when I first got Plusnet Fibre.

No issue with the WiFi hotspot, and the issue was still existing with the BTOpenreach Modem.

What I haven't tried is the BTOpenreach modem without the Draytek Router in the mix.  I won't be able to use the laptop to create a PPOE connection, as it is a company laptop that is locked down for anything beyond normal user changes.

I shall be asking if I can hop onto my neighbours wifi to test that as another test.

Testing the router in another location will be difficult.

Thanks for your comments, they are helpful for me.

Best regards,

Nicholas J Ball

[#8]

Hi Richard,

Only me!!!

I tried my neighbours WiFi, and I can connect to the VPN, and get full speed downloads.

I then dug out the Openreach Modem again and connected it directly to my work laptop.  Once I had setup the connection, all speeds were as good as I have achieved before.  70Mbbs down and 20 Mbps up.

Except when I was downloading on the VPN.  I got nothing.  There is an company internal speedtest website, and it did not even start working.

This now moves the problem away from my local network and upstream to Plusnet.

Plusnet have already played their joker with me and asked if I achieve over the minimum download speed without the VPN:-

Would you be able to confirm if your connection is performing above the minimum guaranteed speed of: 59.4Mbps when your VPN is not active?

 They then followed up with the classic, take a look at the forums:-

Theres nothing on your line to prevent vpn achieving high speeds, the speeds are correct and if the speeds are dropping, its down to vpn configurations or hardware. Perhaps take a look at the community forum to see if you get any help - https://community.plus.net/t5/forums/searchpage/tab/message?advanced=false&allow_punctuation=false&q...

Now that I have confirmed that the issue is not with my network equipment, can one of the Plusnet Staff on the forum take a look at this issue and see if it can be resolved before I pull the trigger on a change of provider?

@Gandalf  - Could you maybe take a look at this please?

Best regards,

Nicholas J Ball

[#9]

Thanks for your post @nabllik_new 

I'm sorry to see you're having connection issues with your VPN. 

Vast majority of VPN issues I'd say are down to the VPN itself, there's very little our side which can stop a VPN from working. Moreover if your previous one was working fine then that seems to point an issue towards the new one you're using. 

I appreciate though that you've tried it on another connection but there are a lot of factors you've changed by doing that, for example the router itself. Can you try a different router on your own connection? 

Also have you contacted your company's IT team to investigate this from their end?

Finally you've got the broadband firewall enabled on your account. Try turning it off: https://www.plus.net/help/broadband/about-plusnets-broadband-firewall/ and retest.

I hope this helps.

[#10]

Finally you've got the broadband firewall enabled on your account. Try turning it off: https://www.plus.net/help/broadband/about-plusnets-broadband-firewall/ and retest.

@nabllik_new just to add to @Gandalf s note. You will need to disconnect and reconnect the broadband connection for the firewall change to take effect

[#11]

Hi Gandalf,

Thanks for getting back to me.

One of the previous companies used Pulse Secure, and the other required a browser based secure connection to setup access to a remote workstation.  Both of those worked well.

Regarding the router, I connected the BTOpenreach modem to the phoneline and connected my company laptop directly to that, so there was no router in the network at all.  That gave the same problem that had been seeing for the VPN whilst connected to my router.  In fact, it gave worse performance on the company speedtest using the BTOR Modem than using my router.

My company IT support are throwing the issue downstream, as there is "nothing wrong with their network"...

They say they are looking at another VPN solution, but, that is not available for users at this time.  I have requested being on a Beta test if that solution is to be rolled out to a broader user group.

I have changed the firewall to "Off", and I will retest.

Thanks again for the reply, I shall feedback once I have retested with the firewall off.

Best regards,

Nicholas J Ball

[#12]

I use a Draytek 2860 with GlobalProtect (and several other VPNs - sometimes simultaneously) without problem so it won't be the router that is he problem. I'm no longer using Plusnet, but never had a problem with VPN (other than MTU) when I did.

[#13]

IIRC in the past we have seen issues with some VPN providers who have out of date Geolocation data.  It would be worthwhile checking the geolocation data for your current IP address.  Some of the dynamic IP address pools used by BT (they assign the IP address) have been "imported" from overseas and some systems are using out of date geolocation data.

@Gandalf might a temporary static IP address be applied here to see if that eliminates the user's issue?

@nabllik_new we have also seen out of date VPN setups have problems working over VPN - that is @bobpullen's arena!

[#14]

@Townman, static IP was tried and a new one given, stated in earlier messages.

[#15]

Hello all,

So, I changed the Firewall settings to "Off", and then I restarted my router.

No change in the performance over VPN.

@corringham  do you remember what MTU you had that worked well?

Best regards,

Nicholas J Ball