(T5176) 04/24/18 16:56:52:415 Debug( 951): Found 32bitProxy.exe pid 6300 (T5176) 04/24/18 16:56:52:415 Debug( 958): Process 6300 was terminated (T5176) 04/24/18 16:56:52:415 Debug( 521): HipMissingPatchThread: Hip check missiing patch thread quits. (T5640) 04/24/18 16:56:52:415 Info ( 135): All hip collect threads quit gracefully. (T5640) 04/24/18 16:56:52:416 Debug(4204): StartThreads(): (T5640) 04/24/18 16:56:52:416 Debug(2803): start a notification timer thread (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 5596 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000002F4 (T5640) 04/24/18 16:56:52:416 Debug(2992): start a captive portal detection thread (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 5276 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000003A8 (T5640) 04/24/18 16:56:52:416 Debug(4211): start a network discover thread (T5596) 04/24/18 16:56:52:416 Debug(2787): NotificationTimerThread: notification timer thread starts. (T5596) 04/24/18 16:56:52:416 Debug(2932): NotificationTimerThread: wait (-1 ms) for notification timer event. (T5276) 04/24/18 16:56:52:416 Debug(2974): CaptivePortalDetectionThread: captive portal detection thread starts. (T5276) 04/24/18 16:56:52:416 Debug(3089): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event. (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 5244 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000002B0 (T5640) 04/24/18 16:56:52:416 Debug(4219): start a HIP report thread (T5244) 04/24/18 16:56:52:416 Debug(3241): NetworkDiscoverThread: network discover thread starts. (T5244) 04/24/18 16:56:52:416 Debug(3266): NetworkDiscoverThread: wait for network discover event. (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 1044 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000001D4 (T5640) 04/24/18 16:56:52:416 Debug(4227): start a network conenction monitor thread (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 1392 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 0000000000000160 (T5640) 04/24/18 16:56:52:416 Debug( 87): start a HIP check thread (T1044) 04/24/18 16:56:52:416 Debug(3663): HipReportThread: HipReportThread starts up. (T1044) 04/24/18 16:56:52:416 Debug(3688): HipReportThread: wait for HIP report ready event. (T1392) 04/24/18 16:56:52:416 Debug(3893): NetworkConnectionMonitorThread: network connection monitor thread starts. (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 3980 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000002F0 (T5640) 04/24/18 16:56:52:416 Debug( 96): start a HIP missing patch thread (T3980) 04/24/18 16:56:52:416 Info ( 170): Start CPanHipCollect::HipCheckThread (T3980) 04/24/18 16:56:52:416 Debug( 213): HipCheckThread started... (T3980) 04/24/18 16:56:52:416 Debug( 219): HipCheckThread: wait for hip check event for 3600000 ms); (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 6060 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 00000000000003A4 (T5640) 04/24/18 16:56:52:416 Debug( 105): start a HIP monitor thread (T6060) 04/24/18 16:56:52:416 Info ( 179): Start CPanHipCollect::HipMissingPatchThread (T6060) 04/24/18 16:56:52:416 Debug( 399): HipMissingPatchThread started... (T5640) 04/24/18 16:56:52:416 Debug( 23): Thread 4656 has been created. (T5640) 04/24/18 16:56:52:416 Info ( 26): create thread 000000000000030C (T5640) 04/24/18 16:56:52:416 Debug(8340): CPanMSServiceWin::UpdateDisableGPSetting() - bDisabled=0. (T5640) 04/24/18 16:56:52:416 Debug(1502): No user home path in portal message. (T5640) 04/24/18 16:56:52:416 Debug(1512): No domain in portal or user credential message. (T5640) 04/24/18 16:56:52:416 Debug( 217): pid of PanGPA is 6320, m_dwPanGpAgentPid is 6320 (T5640) 04/24/18 16:56:52:416 Debug(1529): gets user name jperkins. (T5640) 04/24/18 16:56:52:416 Debug(1548): gets saved-user name jperkins. (T5640) 04/24/18 16:56:52:416 Debug(6696): Saved password is empty. (T5640) 04/24/18 16:56:52:416 Debug(1692): Pre-logon-then-on-demand value is no (T5640) 04/24/18 16:56:52:416 Debug(1336): SSO starts. (T5640) 04/24/18 16:56:52:416 Debug(1365): SSO ----- PanCredGet failed with error=0x2 (T5640) 04/24/18 16:56:52:416 Debug(6712): SSO password is empty (T5640) 04/24/18 16:56:52:416 Debug(1777): empty domain name. (T5640) 04/24/18 16:56:52:416 Debug(4343): Set state to Retrieving configuration... (T4656) 04/24/18 16:56:52:416 Info ( 189): Start CPanHipCollect::HipMonitorThread (T4656) 04/24/18 16:56:52:416 Info ( 734): HipMonitorThread starts (T4656) 04/24/18 16:56:52:416 Debug( 387): Wscapi.dll is loaded. (T4656) 04/24/18 16:56:52:416 Debug( 401): Register -- WscRegisterForChanges (T4656) 04/24/18 16:56:52:417 Info ( 403): HipMonitorThread wait for exit event. (T4656) 04/24/18 16:56:52:417 Debug( 405): before WaitForMultipleObjects (T6060) 04/24/18 16:56:52:417 Debug( 351): Active session id is 2 (T6060) 04/24/18 16:56:52:418 Debug( 274): Found PanGPA pid 6320 (T6060) 04/24/18 16:56:52:418 Debug( 278): Found active PanGPA pid is 6320 (T6060) 04/24/18 16:56:52:418 Debug( 55): Session id is 2 for pid 6320 (T6060) 04/24/18 16:56:52:418 Debug( 95): User profile directory is C:\Users\administrator (T6060) 04/24/18 16:56:52:418 Debug( 110): Found session 2 (T6060) 04/24/18 16:56:52:418 Debug( 140): Skip calling NetUserGetInfo for non-roaming profile. (T6060) 04/24/18 16:56:52:418 Debug( 153): info4_buf is NULL (T6060) 04/24/18 16:56:52:418 Debug( 155): profileInfo username administrator, profile path (null), server (null) (T5640) 04/24/18 16:56:52:425 Debug( 794): GetNicInfo(): NIC count is 3. (T5640) 04/24/18 16:56:52:425 Debug( 641): Hip report changed. Include it in status message to client. (T5640) 04/24/18 16:56:52:426 Debug(4631): ServerThread: ProcessServerPortal -- GetConfigFromPortal (T5640) 04/24/18 16:56:52:426 Debug(5040): entering. (T5640) 04/24/18 16:56:52:426 Debug(5076): SSO enable status is 0, user name is jperkins, domain name is . (T5640) 04/24/18 16:56:52:426 Debug(5079): reset user authentication status to true. (T5640) 04/24/18 16:56:52:426 Debug(1799): open http session. (T5640) 04/24/18 16:56:52:426 Debug( 370): set WINHTTP_OPTION_SECURE_PROTOCOLS (T5640) 04/24/18 16:56:52:426 Debug(1398): Auto detect proxy for host ban.vpn.wisc.edu (T5640) 04/24/18 16:56:52:426 Debug( 370): set WINHTTP_OPTION_SECURE_PROTOCOLS (T5640) 04/24/18 16:56:52:426 Debug( 101): Proxy auto detect timeout 5 seconds (T5640) 04/24/18 16:56:52:426 Debug( 105): dwAveTimeout 1333 ms (T5640) 04/24/18 16:56:52:426 Debug( 133): Auto detect proxy (T5640) 04/24/18 16:56:52:429 Debug(1415): CPanMSServiceWin::SetProxyForHost: fAutoDetect: 1 url: proxy: bypass: url:https://ban.vpn.wisc.edu/ returned proxystr: (T5640) 04/24/18 16:56:52:429 Debug(1440): m_proxyInfo.dwAccessType is 0, m_proxyInfo.lpszProxy is (null) (T5640) 04/24/18 16:56:52:430 Debug(7874): Scep clean (T5640) 04/24/18 16:56:52:430 Debug(7876): Clean m_pScepCert (T5640) 04/24/18 16:56:52:430 Debug(3198): Clean m_szScepCertPanName (T5640) 04/24/18 16:56:52:430 Debug(3009): TriggerCaptivePortalDetection() return due to captive portal detection is in progress (0) or PreLogin is Done (1) (T5640) 04/24/18 16:56:52:430 Debug(4398): Pre-login...,verifyportalcert=yes (T5640) 04/24/18 16:56:52:430 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer (T5640) 04/24/18 16:56:52:430 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer does not exist. (T5640) 04/24/18 16:56:52:430 Debug(7019): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer does not exist. (T5640) 04/24/18 16:56:52:430 Debug(7056): CheckServerCert() returns FALSE (T5640) 04/24/18 16:56:52:430 Debug(2332): portal proxyparam is empty (T5640) 04/24/18 16:56:52:430 Debug(2354): OID, oid= (T5640) 04/24/18 16:56:52:430 Debug(2398): IPADDR=ban.vpn.wisc.edu,PORT=443,URL=/global-protect/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=1,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T5640) 04/24/18 16:56:52:430 Debug( 910): Send response to client for request https_request (T5640) 04/24/18 16:56:52:430 Debug(2428): gpapintimeout not set, set it to 600 seconds (T6060) 04/24/18 16:56:52:434 Debug( 169): User profile loaded. (T6060) 04/24/18 16:56:52:434 Debug( 185): Impersonated logged on user. (T6060) 04/24/18 16:56:52:434 Debug( 187): Profile type is 0 (T6060) 04/24/18 16:56:52:434 Debug( 239): User profile unloaded (T6060) 04/24/18 16:56:52:434 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Windows\system32\config\systemprofile\AppData\Local\Palo Alto Networks\GlobalProtect\PanGpMPR.dat (T6060) 04/24/18 16:56:52:434 Debug( 438): HipMissingPatchThread: now is 1524607012, last hip check is 1524606990, hip check interval is 3600000 (T6060) 04/24/18 16:56:52:434 Debug( 443): HipMissingPatchThread: wait 3578000 ms (T5640) 04/24/18 16:56:52:468 Debug(2498): receive pan_msg_ping, 1 (T5640) 04/24/18 16:56:52:468 Debug(2663): HTTP_RPC, len=279, result is Success false Success false Enter login credentials 1 (T5640) 04/24/18 16:56:52:468 Debug(4474): Portal authentication-message is Enter login credentials (T5640) 04/24/18 16:56:52:468 Debug(4490): autosubmit is false (T5640) 04/24/18 16:56:52:468 Debug(4496): kerberos, tag krb-norm-username does not exist, check tag ccusername now. (T5640) 04/24/18 16:56:52:468 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanSCEP_912691b8fb641e7e0202eb5a05d7853.cer (T5640) 04/24/18 16:56:52:468 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanSCEP_912691b8fb641e7e0202eb5a05d7853.pfx (T5640) 04/24/18 16:56:52:468 Debug(5031): Portal user auth cookie file name is C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat (T5640) 04/24/18 16:56:52:469 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:469 Debug(1180): Opened file to read: C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat (T5640) 04/24/18 16:56:52:469 Debug(1201): File is successfully decrypted. File: C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat (T5640) 04/24/18 16:56:52:469 Debug(1226): Unserialized empty cookie for portal ban.vpn.wisc.edu and user jperkins (T5640) 04/24/18 16:56:52:469 Debug(5004): Portal prelogon auth cookie file name is PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5640) 04/24/18 16:56:52:469 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:469 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5640) 04/24/18 16:56:52:469 Debug( 460): pan_read_text_from_file(): File is successfully decrypted. File: C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5640) 04/24/18 16:56:52:469 Debug(1147): UnserializePortalPrelogonAuthCookie. (T5640) 04/24/18 16:56:52:469 Debug(1154): Unserialized empty cookie for portal ban.vpn.wisc.edu and pre-logon user. (T5640) 04/24/18 16:56:52:469 Debug(5712): Login... (T5640) 04/24/18 16:56:52:469 Debug(5732): pszPortalString = 00000000002F4750, new char[2376]; (T5640) 04/24/18 16:56:52:469 Debug(5738): m_szDomainAndUsername is jperkins (T5640) 04/24/18 16:56:52:469 Debug(5772): GetHttpResponse()... (T5640) 04/24/18 16:56:52:469 Debug(2332): portal proxyparam is empty (T5640) 04/24/18 16:56:52:469 Debug(2354): OID, oid= (T5640) 04/24/18 16:56:52:469 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:469 Debug(2398): IPADDR=ban.vpn.wisc.edu,PORT=443,URL=/global-protect/getconfig.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T5640) 04/24/18 16:56:52:469 Debug( 910): Send response to client for request https_request (T5640) 04/24/18 16:56:52:469 Debug(2403): Clean post data (T5640) 04/24/18 16:56:52:469 Debug(2428): gpapintimeout not set, set it to 600 seconds (T5640) 04/24/18 16:56:52:521 Debug(2498): receive pan_msg_ping, 1 (T5640) 04/24/18 16:56:52:521 Debug(2663): HTTP_RPC, len=13992, result is BAN-portal 4100 3.1.6-19... (T5640) 04/24/18 16:56:52:521 Debug( 180): 5 OTP options exist in portal configuration. (T5640) 04/24/18 16:56:52:521 Debug( 252): Collect hip data is true (T5640) 04/24/18 16:56:52:521 Debug( 63): VPN event pre-vpn-connect does not exist. (T5640) 04/24/18 16:56:52:521 Debug( 63): VPN event post-vpn-connect does not exist. (T5640) 04/24/18 16:56:52:522 Debug( 63): VPN event pre-vpn-disconnect does not exist. (T5640) 04/24/18 16:56:52:522 Debug( 323): No third party vpn clients defined (T5640) 04/24/18 16:56:52:522 Debug( 334): No internal host detection defined (T5640) 04/24/18 16:56:52:522 Debug( 456): No internal gateway defined (T5640) 04/24/18 16:56:52:522 Debug( 475): Optional client-cert does not exist (T5640) 04/24/18 16:56:52:522 Debug( 511): Optional root-ca does not exist (T5640) 04/24/18 16:56:52:522 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:522 Debug( 209): pan_write_text_to_file(): don't check pre-existance. (T5640) 04/24/18 16:56:52:523 Debug( 214): pan_write_text_to_file(): wrote 14000 of 14000 bytes to file C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_912691b8fb641e7e0202eb5a05d7853.dat. (T5640) 04/24/18 16:56:52:523 Debug( 64): Saved portal config to file C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_912691b8fb641e7e0202eb5a05d7853.dat. (T5640) 04/24/18 16:56:52:523 Debug(1378): Proxy auto detect is not needed (T5640) 04/24/18 16:56:52:523 Debug(6112): RefreshPortalConfig is yes, RefreshPortalConfigInterval is 24 (T5640) 04/24/18 16:56:52:523 Debug(7977): OID, new box (T5640) 04/24/18 16:56:52:523 Debug(7985): OID, m_OID is (T5640) 04/24/18 16:56:52:523 Debug(7987): OID, get from dynamic config is (T5640) 04/24/18 16:56:52:523 Debug(7993): kerberos, dynamic config value is yes (T5640) 04/24/18 16:56:52:523 Info ( 210): Failed to find attribute 'mdm-address' (T5640) 04/24/18 16:56:52:523 Debug(6204): Failed to get mdm-address from config, try local (T5640) 04/24/18 16:56:52:523 Debug(7226): Set mdm address as empty (T5640) 04/24/18 16:56:52:523 Debug(6141): MDM is disabled (T5640) 04/24/18 16:56:52:523 Info ( 210): Failed to find attribute 'scep-profile-name' (T5640) 04/24/18 16:56:52:523 Debug(6149): Scep certificate renew period is 7 days. Scep cert auth cookie length is 57 (T5640) 04/24/18 16:56:52:523 Debug(6160): Otp portal 0, otp internal gateway 0, otp auto external gateway 0, otp manual only external gateway 0 (T5640) 04/24/18 16:56:52:523 Debug(5809): No scep profile (T5640) 04/24/18 16:56:52:523 Debug(1824): close WinHttp close handle. (T5640) 04/24/18 16:56:52:523 Debug(5127): this version of portal config is supported. (T5640) 04/24/18 16:56:52:523 Debug(5260): portal status is Connected. (T5640) 04/24/18 16:56:52:523 Debug(5261): returns 1. (T5640) 04/24/18 16:56:52:523 Debug(4715): Reload Agent Reg Config. (T5640) 04/24/18 16:56:52:524 Debug(1770): AlwaysOn,remove rules (T5640) 04/24/18 16:56:52:524 Debug( 223): AlwaysOn,Opening Filtering Engine (T5640) 04/24/18 16:56:52:543 Debug(1691): AlwaysOn,Always On, 802 entries found in filter objects (T5640) 04/24/18 16:56:52:543 Debug(1717): AlwaysOn,796 (T5640) 04/24/18 16:56:52:543 Debug(4747): Reset temprorarily saved gateway user. (T5640) 04/24/18 16:56:52:543 Debug(5881): entering ExportTrustedCA. (T5640) 04/24/18 16:56:52:543 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer (T5640) 04/24/18 16:56:52:543 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer does not exist. (T5640) 04/24/18 16:56:52:543 Info (5900): Optional tag root-ca does not exist. (T5640) 04/24/18 16:56:52:543 Debug(4765): ExportedMTU trusted CA. (T5640) 04/24/18 16:56:52:543 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\cc.cer (T5640) 04/24/18 16:56:52:544 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\cc.cer does not exist. (T5640) 04/24/18 16:56:52:544 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\cc.pfx (T5640) 04/24/18 16:56:52:544 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\cc.pfx does not exist. (T5640) 04/24/18 16:56:52:544 Debug(5985): returns true. (T5640) 04/24/18 16:56:52:544 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\cc.pfx (T5640) 04/24/18 16:56:52:544 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:544 Info ( 199): EVP_DecryptFinal_ex failed (T5640) 04/24/18 16:56:52:544 Info ( 630): pan_get_password failed. (T5640) 04/24/18 16:56:52:544 Error(2022): failed to retrieve client certificate passphrase. return false. (T5640) 04/24/18 16:56:52:544 Error(4767): Failed to export client cert. (T5640) 04/24/18 16:56:52:544 Debug(4769): NetworkDiscoverThread: Exported client cert. (T5640) 04/24/18 16:56:52:544 Debug(4773): ServerThread: ProcessServerPortal -- GetHipPolicyCopy(); (T5640) 04/24/18 16:56:52:544 Debug(5361): enters GetPolicyForClient(). (T5640) 04/24/18 16:56:52:544 Info (5409): On-Demand mode is on (T5640) 04/24/18 16:56:52:544 Info ( 210): Failed to find attribute 'pre-logon-then-on-demand' (T5640) 04/24/18 16:56:52:544 Debug(6204): Failed to get pre-logon-then-on-demand from config, try local (T5640) 04/24/18 16:56:52:544 Info (5426): Connect method is On-Demand (T5640) 04/24/18 16:56:52:544 Info (5446): On-demand mode is true. (T5640) 04/24/18 16:56:52:544 Debug(6320): Old Portal is ban.vpn.wisc.edu, PrelogonEnabled is 0 (T5640) 04/24/18 16:56:52:544 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:544 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\HipPolicy.dat (T5640) 04/24/18 16:56:52:545 Debug( 209): pan_write_text_to_file(): don't check pre-existance. (T5640) 04/24/18 16:56:52:545 Debug( 214): pan_write_text_to_file(): wrote 528 of 528 bytes to file C:\Program Files\Palo Alto Networks\GlobalProtect\HipPolicy.dat. (T5640) 04/24/18 16:56:52:545 Debug( 162): Saved hip policy to file HipPolicy.dat. (T5640) 04/24/18 16:56:52:545 Debug(5477): RetrieveHipCheckInterval (T5640) 04/24/18 16:56:52:545 Info (5479): Hip check interval is 3600000 ms. (T5640) 04/24/18 16:56:52:545 Debug(5483): Set check hip event (T5640) 04/24/18 16:56:52:545 Debug( 784): m_bScheduleFlag is set to 0 (T5640) 04/24/18 16:56:52:545 Debug( 292): Set hip check event. (T5640) 04/24/18 16:56:52:545 Debug(5485): Set hip missing patch check event. (T5640) 04/24/18 16:56:52:545 Info ( 210): Failed to find attribute 'userauthcookie' (T5640) 04/24/18 16:56:52:545 Debug(6204): Failed to get userauthcookie from config, try local (T3980) 04/24/18 16:56:52:545 Info ( 230): HipCheckThread: got check hip event or time out. (T3980) 04/24/18 16:56:52:545 Debug( 239): HipCheckThread: Got CheckHipEvent. (T3980) 04/24/18 16:56:52:545 Debug( 762): SetNextScheduledHipCheckTime to 1524610612 (T3980) 04/24/18 16:56:52:545 Debug( 260): Last hip check event wakeup tick is 1524607012 (T3980) 04/24/18 16:56:52:545 Debug( 262): HipCheckThread: check hip in other process. (T3980) 04/24/18 16:56:52:545 Debug( 301): CheckHipInOtherProcess() (T3980) 04/24/18 16:56:52:545 Debug( 305): Need to collect hip data (T6060) 04/24/18 16:56:52:545 Debug( 448): HipMissingPatchThread: Got CheckHipMissingPatchEvent. (T6060) 04/24/18 16:56:52:545 Debug( 377): CheckHipMissingPatchInOtherProcess() (T6060) 04/24/18 16:56:52:545 Debug( 380): Need to check missing patch. (T5640) 04/24/18 16:56:52:545 Info (5518): No tag userauthcookie exists in portal config. (T5640) 04/24/18 16:56:52:545 Debug(1240): Serialize empty cookie for portal ban.vpn.wisc.edu and user jperkins (T5640) 04/24/18 16:56:52:545 Debug(5031): Portal user auth cookie file name is C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat (T3980) 04/24/18 16:56:52:545 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanGpHip.exe (T6060) 04/24/18 16:56:52:545 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanGpHipMp.exe (T6060) 04/24/18 16:56:52:545 Debug( 301): CheckHipMissingPatchInOtherProcess(): Starting process PanGpHipMp.exe (T3980) 04/24/18 16:56:52:545 Debug( 125): Starting process PanGpHip.exe (T5640) 04/24/18 16:56:52:545 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:545 Debug(1282): Portal user auth cookie has been encrypted. (T5640) 04/24/18 16:56:52:546 Debug(1287): Serialized portal user auth cookie to file C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat. 16 bytes. (T5640) 04/24/18 16:56:52:546 Debug(1121): Serialize empty cookie for portal ban.vpn.wisc.edu and pre-logon user (T5640) 04/24/18 16:56:52:546 Debug(5004): Portal prelogon auth cookie file name is PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5640) 04/24/18 16:56:52:546 Debug( 73): CTranslate: dwSidLen is 24 (T5640) 04/24/18 16:56:52:546 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5640) 04/24/18 16:56:52:546 Debug( 209): pan_write_text_to_file(): don't check pre-existance. (T5640) 04/24/18 16:56:52:547 Debug( 214): pan_write_text_to_file(): wrote 16 of 16 bytes to file C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat. (T5640) 04/24/18 16:56:52:547 Debug(1128): SerializePortalPrelogonAuthCookie (T5640) 04/24/18 16:56:52:547 Debug(5544): Retrieved user-switch-tunnel-rename-timeout value 0 (T5640) 04/24/18 16:56:52:547 Debug(5560): The value of can-continue-if-portal-cert-invalid is yes (T5640) 04/24/18 16:56:52:547 Debug(5572): returns true. (T5640) 04/24/18 16:56:52:547 Debug(4791): prelogon status is 0 (T5640) 04/24/18 16:56:52:547 Debug(4796): Gateway MD5 is 83BE15EC-D4A1931D-2B5588EE-908E26C8 (T5640) 04/24/18 16:56:52:547 Debug(4798): m_bPreviousSwitchOffMsg is 0 (T5640) 04/24/18 16:56:52:547 Debug(4868): Previous message is not switch-off (T5640) 04/24/18 16:56:52:547 Debug(4873): Gateway MD5 is 83BE15EC-D4A1931D-2B5588EE-908E26C8 (T5640) 04/24/18 16:56:52:547 Debug(4874): ServerThread: ProcessServerPortal -- SetEvent(m_hNetworkDiscoverEvent); (T5640) 04/24/18 16:56:52:547 Debug(4906): ServerThread: ProcessServerPortal -- return SendResponseToClient(socket, PAN_SERVER_HIP); (T5640) 04/24/18 16:56:52:548 Debug( 910): Send response to client for request hip (T5640) 04/24/18 16:56:52:548 Debug(7288): Set m_bPreviousSwitchOffMsg to 0 (T5244) 04/24/18 16:56:52:548 Debug( 413): Set hip report quit event (T5244) 04/24/18 16:56:52:548 Debug(3281): NetworkDiscoverThread: got network discover event. (T5244) 04/24/18 16:56:52:548 Debug( 762): SetNextScheduledHipCheckTime to 0 (T5244) 04/24/18 16:56:52:548 Debug( 784): m_bScheduleFlag is set to 0 (T5244) 04/24/18 16:56:52:548 Debug(1570): IsDefaultRouteAvailable is 1 (T5244) 04/24/18 16:56:52:548 Debug(1578): Network is available (T5244) 04/24/18 16:56:52:548 Debug(3292): finish check host reachable (T5244) 04/24/18 16:56:52:548 Debug(3014): TriggerCaptivePortalDetection() end (T5244) 04/24/18 16:56:52:548 Debug(3317): NetworkDiscover SN is 14 (T5244) 04/24/18 16:56:52:548 Debug(4343): Set state to Discovering network... (T5276) 04/24/18 16:56:52:548 Debug(3111): CaptivePortalDetectionThread: delay 2 seconds before captive portal detection. m_bIsDetectingCaptivePortal=1, m_bPreLoginIsDone = 0 (T5276) 04/24/18 16:56:52:548 Debug(3089): CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event. (T5244) 04/24/18 16:56:52:548 Debug(3325): Logout gateways before network discover... (T5244) 04/24/18 16:56:52:548 Debug( 838): Logging out gateway, reason is Network discover (T5244) 04/24/18 16:56:52:548 Debug( 868): Logging out gateway over (T5244) 04/24/18 16:56:52:548 Debug(1433): Auto detect proxy is not needed for host ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:548 Debug(1440): m_proxyInfo.dwAccessType is 0, m_proxyInfo.lpszProxy is (null) (T5244) 04/24/18 16:56:52:549 Debug(3333): NetworkDiscoverThread: got network discover event. (T5244) 04/24/18 16:56:52:549 Debug(3344): Set network discover in progress (T5244) 04/24/18 16:56:52:549 Debug(3400): NetworkDiscoverThread: network type is external. (T5244) 04/24/18 16:56:52:549 Debug(3468): NetworkDiscoverThread: Discover external network. (T5244) 04/24/18 16:56:52:549 Debug( 341): gateway count is 1. (T5244) 04/24/18 16:56:52:549 Debug(1433): Auto detect proxy is not needed for host ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:549 Debug(1440): m_proxyInfo.dwAccessType is 0, m_proxyInfo.lpszProxy is (null) (T5244) 04/24/18 16:56:52:549 Debug(1922): GetClientIpForGateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:549 Info (1954): Gateway: ban.vpn.wisc.edu, client IP: 128.105.20.14 (T5244) 04/24/18 16:56:52:549 Debug(6182): Failed to get pre-vpn-connect from config, try local (T5244) 04/24/18 16:56:52:549 Debug(7331): Vpn event pre-vpn-connect does not exist (T5244) 04/24/18 16:56:52:549 Debug(4127): Clear pre-vpn-connect error message for gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:549 Debug(1703): retrieve info of gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:549 Debug(1799): open http session. (T5244) 04/24/18 16:56:52:549 Debug( 370): set WINHTTP_OPTION_SECURE_PROTOCOLS (T5244) 04/24/18 16:56:52:549 Debug(1714): Skip setting proxy for creating tunnel to gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:549 Debug(2955): Machine's device id is a4e880a6-e5f9-4c1a-92cf-ff971796adba (T5244) 04/24/18 16:56:52:549 Debug(2955): Machine's device id is a4e880a6-e5f9-4c1a-92cf-ff971796adba (T5244) 04/24/18 16:56:52:549 Debug(2955): Machine's device id is a4e880a6-e5f9-4c1a-92cf-ff971796adba (T5244) 04/24/18 16:56:52:549 Debug(2359): Pre-login gateway... (T5244) 04/24/18 16:56:52:549 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer (T5244) 04/24/18 16:56:52:550 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer does not exist. (T5244) 04/24/18 16:56:52:550 Debug(7019): File C:\Program Files\Palo Alto Networks\GlobalProtect\tca.cer does not exist. (T5244) 04/24/18 16:56:52:550 Debug(7056): CheckServerCert() returns FALSE (T5244) 04/24/18 16:56:52:550 Debug(7129): Need to check gateway cert for ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:550 Debug(2302): gatewayitem000000000293ADF8 proxyparam is 000000000293CE58 (T5244) 04/24/18 16:56:52:550 Debug(2316): gateway proxyparam is empty (T5244) 04/24/18 16:56:52:550 Debug(2354): OID, oid= (T5244) 04/24/18 16:56:52:550 Debug(2398): IPADDR=ban.vpn.wisc.edu,PORT=443,URL=/ssl-vpn/prelogin.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=1,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T5244) 04/24/18 16:56:52:550 Debug( 910): Send response to client for request https_request (T5244) 04/24/18 16:56:52:550 Debug(2428): gpapintimeout not set, set it to 600 seconds (T3980) 04/24/18 16:56:52:553 Debug( 142): Wait for the ready event of hip report generated in other process. (T5244) 04/24/18 16:56:52:580 Debug(2498): receive pan_msg_ping, 1 (T5244) 04/24/18 16:56:52:580 Debug(2663): HTTP_RPC, len=302, result is Success false (null)3d649c4df3029feeec3298f61d3cf6245f84b3f... (T5244) 04/24/18 16:56:52:616 Debug(1240): Serialize empty cookie for portal ban.vpn.wisc.edu and user jperkins (T5244) 04/24/18 16:56:52:616 Debug(5031): Portal user auth cookie file name is C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat (T5244) 04/24/18 16:56:52:617 Debug( 73): CTranslate: dwSidLen is 24 (T5244) 04/24/18 16:56:52:617 Debug(1282): Portal user auth cookie has been encrypted. (T5244) 04/24/18 16:56:52:617 Debug(1287): Serialized portal user auth cookie to file C:\Users\administrator\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_912691b8fb641e7e0202eb5a05d7853.dat. 16 bytes. (T5244) 04/24/18 16:56:52:617 Debug(1121): Serialize empty cookie for portal ban.vpn.wisc.edu and pre-logon user (T5244) 04/24/18 16:56:52:617 Debug(5004): Portal prelogon auth cookie file name is PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5244) 04/24/18 16:56:52:617 Debug( 73): CTranslate: dwSidLen is 24 (T5244) 04/24/18 16:56:52:617 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat (T5244) 04/24/18 16:56:52:617 Debug( 209): pan_write_text_to_file(): don't check pre-existance. (T5244) 04/24/18 16:56:52:618 Debug( 214): pan_write_text_to_file(): wrote 16 of 16 bytes to file C:\Program Files\Palo Alto Networks\GlobalProtect\PanPPAC_c483e3e3d2cc2f09dbbc2f6d1e94974.dat. (T5244) 04/24/18 16:56:52:618 Debug(1128): SerializePortalPrelogonAuthCookie (T5244) 04/24/18 16:56:52:618 Debug(7248): bNetworkDisoverEventSet is 0, m_bRedoNetworkDiscovery is 0 (T5244) 04/24/18 16:56:52:618 Debug(1724): Try to create tunnel with gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:618 Debug(4343): Set state to Connecting... (T5244) 04/24/18 16:56:52:618 Debug(3905): Add pre vpn connect error _ (T5244) 04/24/18 16:56:52:618 Debug(1612): proxy , proxyuser , domain ad, user jperkins, portal BAN-vpn-gateway-N, remotehost 144.92.249.43. (T5244) 04/24/18 16:56:52:618 Debug(1832): InitClientFeature to get client feature, bUserCCUser =0, user name = jperkins. (T5244) 04/24/18 16:56:52:620 Debug(1846): feature to html. (T5244) 04/24/18 16:56:52:620 Debug(1852): Get http response. (T5244) 04/24/18 16:56:52:620 Debug(7129): Need to check gateway cert for ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:620 Debug(2302): gatewayitem000000000293ADF8 proxyparam is 000000000293CE58 (T5244) 04/24/18 16:56:52:620 Debug(2316): gateway proxyparam is empty (T5244) 04/24/18 16:56:52:620 Debug(2354): OID, oid= (T5244) 04/24/18 16:56:52:620 Debug(2398): IPADDR=ban.vpn.wisc.edu,PORT=443,URL=/ssl-vpn/getconfig.esp,POST=1,PROXY_AUTO=1,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T5244) 04/24/18 16:56:52:620 Debug( 910): Send response to client for request https_request (T5244) 04/24/18 16:56:52:620 Debug(2428): gpapintimeout not set, set it to 600 seconds (T5244) 04/24/18 16:56:52:629 Debug(2498): receive pan_msg_ping, 1 (T5244) 04/24/18 16:56:52:629 Debug(2663): HTTP_RPC, len=152, result is BAN-vpn-gateway-N jperkins Assign private IP address failed ... (T5244) 04/24/18 16:56:52:629 Debug(1880): gateway ban.vpn.wisc.edu's config is BAN-vpn-gateway-N jperkins Assign private IP address failed (T5244) 04/24/18 16:56:52:629 Debug(1888): returns TRUE. (T5244) 04/24/18 16:56:52:629 Debug(3747): In SetGatewayRoute: The original route table: (T5244) 04/24/18 16:56:52:629 Debug( 138): Destination NetMask Gateway Inf Metric (T5244) 04/24/18 16:56:52:629 Debug( 153): 0.0.0.0 0.0.0.0 128.105.20.1 13 10 (T5244) 04/24/18 16:56:52:629 Debug( 153): 127.0.0.0 255.0.0.0 127.0.0.1 1 306 (T5244) 04/24/18 16:56:52:629 Debug( 153): 127.0.0.1 255.255.255.255 127.0.0.1 1 306 (T5244) 04/24/18 16:56:52:629 Debug( 153): 127.255.255.255 255.255.255.255 127.0.0.1 1 306 (T5244) 04/24/18 16:56:52:629 Debug( 153): 128.105.20.0 255.255.255.0 128.105.20.14 13 266 (T5244) 04/24/18 16:56:52:629 Debug( 153): 128.105.20.14 255.255.255.255 128.105.20.14 13 266 (T5244) 04/24/18 16:56:52:629 Debug( 153): 128.105.20.255 255.255.255.255 128.105.20.14 13 266 (T5244) 04/24/18 16:56:52:629 Debug( 153): 144.92.249.43 255.255.255.255 128.105.20.1 13 10 (T5244) 04/24/18 16:56:52:629 Debug( 153): 224.0.0.0 240.0.0.0 127.0.0.1 1 306 (T5244) 04/24/18 16:56:52:629 Debug( 153): 224.0.0.0 240.0.0.0 128.105.20.14 13 266 (T5244) 04/24/18 16:56:52:629 Debug( 153): 255.255.255.255 255.255.255.255 127.0.0.1 1 306 (T5244) 04/24/18 16:56:52:629 Debug( 153): 255.255.255.255 255.255.255.255 128.105.20.14 13 266 (T5244) 04/24/18 16:56:52:629 Debug(3757): SetGatewayRoute: GetBestRoute() returns Dest:144.92.249.43 Mask:144.92.249.43 if_index=13 metric1=10 (T5244) 04/24/18 16:56:52:629 Debug(3775): Created gateway route (144.92.249.43) succeeds (T5244) 04/24/18 16:56:52:629 Debug(1661): calling EnableVIF(). (T5244) 04/24/18 16:56:52:629 Debug(1670): calling SetConfig(). (T5244) 04/24/18 16:56:52:629 Error( 472): Failed to set client config (T5244) 04/24/18 16:56:52:629 Error(1681): CreateTunnel: SetConfig() failed (T5244) 04/24/18 16:56:52:629 Debug(4343): Set state to Connection failed (T5244) 04/24/18 16:56:52:629 Debug(1690): VPN tunnel is not connected. (T5244) 04/24/18 16:56:52:629 Debug(1692): returns FALSE. (T5244) 04/24/18 16:56:52:629 Debug(1741): failed to create tunnel with gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:629 Info (1516): logout: user=jperkins, portal=BAN-vpn-gateway-N, gateway=ban.vpn.wisc.edu, domain=ad, computerName=BRUISER (T5244) 04/24/18 16:56:52:629 Debug(1542): url is POST /ssl-vpn/logout.esp? HTTP/1.1 Accept: */* Content-Length: 184 Content-Type: application/x-www-form-urlencoded Host: 144.92.249.43 user=jperkins&portal=BAN-vpn-gateway-N&authcookie=********************************&domain=ad&computer=BRUISER&os-version=Microsoft+Windows+7+Enterprise+Edition+Service+Pack+1%2c+64-bit (T5244) 04/24/18 16:56:52:629 Debug(3156): entering... (T5244) 04/24/18 16:56:52:629 Debug( 76): pan_get_full_path(): full path in multibyte char is C:\Program Files\Palo Alto Networks\GlobalProtect\cc.pfx (T5244) 04/24/18 16:56:52:629 Info (1259): File C:\Program Files\Palo Alto Networks\GlobalProtect\cc.pfx does not exist. (T5244) 04/24/18 16:56:52:630 Debug( 47): WSAGetLastError() returns 10035 (T5244) 04/24/18 16:56:52:652 Debug(3169): CPanMSService::SendNReceive(): SSL is connected. (T5244) 04/24/18 16:56:52:652 Debug(3187): Msg length is 326. Sending POST /ssl-vpn/logout.esp? HTTP/1.1 Accept: */* Content-Length: 184 Content-Type: application/x-www-form-urlencoded Host: 144.92.249.43 user=jperkins&portal=BAN-vpn-gateway-N&authcookie=********************************&domain=ad&computer=BRUISER&os-version=Microsoft+Windows+7+Enterprise+Edition+Service+Pack+1%2c+64-bit (T5244) 04/24/18 16:56:52:659 Debug(1189): SSL3 alert write:warning:close notify (T5244) 04/24/18 16:56:52:659 Debug(1577): Logged out gateway ban.vpn.wisc.edu (T5244) 04/24/18 16:56:52:659 Debug(1824): close WinHttp close handle. (T5244) 04/24/18 16:56:52:659 Debug(1759): tunnel to ban.vpn.wisc.edu is not created. (T5244) 04/24/18 16:56:52:659 Error(3507): NetworkDiscoverThread: failed to discover external network. (T5244) 04/24/18 16:56:52:659 Debug(4343): Set state to Disconnected (T5244) 04/24/18 16:56:52:659 Debug(3542): NetworkDiscoverThread: m_nPortalStatus is 1, m_bHasLoggedOnGateway is 1 (T5244) 04/24/18 16:56:52:659 Debug(3558): Network discovery is not ready, set GP VPN status as disconnected (T5244) 04/24/18 16:56:52:659 Debug(7069): SetVpnStatus called with new status=0, Previous Status=0 (T5244) 04/24/18 16:56:57:660 Debug(3598): NetworkDiscoverThread: Network discover is not successful. Retry. (T5244) 04/24/18 16:56:57:660 Info (3614): OnDemand mode, skip retry network discovery. (T5244) 04/24/18 16:56:57:660 Debug(3266): NetworkDiscoverThread: wait for network discover event. (T3980) 04/24/18 16:57:01:850 Debug( 146): Got hip report in other process ready event. (T3980) 04/24/18 16:57:01:850 Debug( 165): Read output from PanGpHip.exe (T3980) 04/24/18 16:57:01:851 Debug( 202): write hip file now (T3980) 04/24/18 16:57:01:851 Debug( 213): CheckHipInOtherProcess() sets hip report ready event. (T3980) 04/24/18 16:57:01:851 Debug( 142): Wait for the ready event of hip report generated in other process. (T1044) 04/24/18 16:57:01:851 Debug(3693): HipReportThread: got HIP report ready event. (T1044) 04/24/18 16:57:01:851 Debug(3709): HipReportThread: wait for network discover ready event. (T3980) 04/24/18 16:57:03:839 Debug( 150): Got event for PanGpHip process has quited. (T3980) 04/24/18 16:57:03:839 Debug( 329): CheckHip over (T3980) 04/24/18 16:57:03:839 Debug( 277): Hip checking is not initiated by clicking resubmit host profile. (T3980) 04/24/18 16:57:03:839 Debug( 219): HipCheckThread: wait for hip check event for 3600000 ms);