GlobalProtect VPN not working with T-Mobile

RonDLS wrote:

SaulGC wrote:

Got my Tmobile Home Internet yesterday and having same issue, will call Tmobile to rollback the firmware for Global VPN fix. Any issues on network speed by rolling back the firmware?

No need to rollback. Update to the latest 1609 version instead.

Yes, called Tmobile and updated my firmware to .1609 and Global VPN works now.
But I do notice that my speed is reduced when connected to the Global VPN, download speed reduces by a factor 2x and upload speed reduces by a factor of 10x. So when working on my remote desktop through VPN connection it is choppy/laggy.
Hoping this is a temporary issue hate to switch back to spectrum as Tmobile is faster and cheaper.  

SaulGC wrote:

Got my Tmobile Home Internet yesterday and having same issue, will call Tmobile to rollback the firmware for Global VPN fix. Any issues on network speed by rolling back the firmware?

No need to rollback. Update to the latest 1609 version instead.

Got my Tmobile Home Internet yesterday and having same issue, will call Tmobile to rollback the firmware for Global VPN fix. Any issues on network speed by rolling back the firmware?

Just checked this morning and I see that my T-Mobile Internet Gateway is now on the newer 1609 version. My GlobalProtect VPN now works with no issue (so far)! <knock on wood> I am now able to use Remote Desktop to my desktop computer in the office as well as access internal work sites.

Ugh! Just got my T-Mobile 5G Internet Gateway and it came with .0178 software version. Internet speeds are great at 500 down and 50 up! (Los Angeles area btw)

However, I am having the Global Protect VPN issue where it connects but I can’t use Remote Desktop to my office computer or access any of our internal sites.

After reading posts on this forum, I called T-Mobile Support to upgrade my firmware version to the newer .1609 version. They told me it may take up to a day. Keeping fingers crossed that the new .1609 version fixes the Global Protect VPN issue!

For ordinary computer users understanding how VPN works is not a fun task, while most Americans even never heard the word. If you are a T-Mobile user, VPN setting issues can be resolved without inventing a new wheel or spending a whole day for settings unless you enjoy it. 

This was my solution which was reasonably quick and trouble-free. After I read articles above posted by other frustrated users (or grateful pioneers) I called T-Mobile tech support and pinpointed what I should ask for. The tech guy understood the task immediately and jumped into the "upgrading" a feature in my modem. He called back about 20 min later to declare the success. I like T-Mobile once again.

Hey all,

Same problem as most, wife’s now WFH and her work laptop’s VPN GlobalProtect would conectar, but upon connecting, she couldn't actually access any sites.   And her work was unwilling to make the MTU adjustment.

Called T-Mobile Home Internet Tech Support at 844-275-9310, tonight on Sept 2nd 2021.  After a decent hold time, the representative got on the line, told him we had the GlobalProtect conflict, and he seemed to know immediately what to do.

Interesting part is I asked him what they were going to do, and he said they would NOT roll back to .168.  Instead, he said T-Mobile has recognized they had issues with not only GlobalProtect but also other VPNs (believe he mentioned Cisco), and so their engineers have been working on it. 

He then remotely put our router on version 1.2101.00.1609.  (before the call we were on .0178). My wife then got on GlobalProtect, tested all her apps, and at least with a few minutes of testing everything seems to be working well now. 

Thanks for everyone who posted info about this problem on this thread.  **hopefully** it's fixed now with this .1609 update that we just got.  A few more days' testing time will conclude one way or the other.

I just received my Gateway over the weekend & ran into this problem w/GlobalProtect this past Monday.  Microsoft Outlook & Teams worked fine, but no web access.  As of Tuesday, the 24th, at least here in the Washington, DC, area, T-Mobile's solution is still to roll back the firmware.

My symptom was a little unique, but it might help somebody else with the same issue.

I was able to successfully connect thru GlobalConnect, however occasionally I would lose internet connectivity.  Of greater importance, I was unable to maintain a RDP connection to Windows Servers (2016 and 2019).  I could connect to the server, however it would drop after 20-30 seconds.  RDP connections to Workstations running Windows10 worked fine.

T-Mobile support downgraded my firmware to .0168 (as mentioned above).  My RDP sessions are now working as expected.

Also as mentioned above, as soon as I said “Global Protect” to the T-Mobile support person, they immediately knew what to do (downgrade the firmware).

GlobalProtect-PlayNICE wrote:

Change Windows MTU Size

3. As mentioned on the above replies. credit Rich T, Type the following: 

netsh int ipv4 set subinterface “Ethernet 2” mtu=1300 store=persistent

Replace “Ethernet 2” (keep the quotes) with whatever name your computer uses for the globalprotect virtual interface in ipconfig.

Confirmed this one works on Cisco Meraki VPN.  My VPN was connecting intermittently.  When connected, download speed was only ~45kbps.  It was enough to see files on the network but took forever to download anything, and was unable to load any website.  Once I changed the mtu size from the default 1400 to 1300, everything works just fine.  My gateway has .178 firmware.