topic Re: GlobalProtect issue when try to connect many agents behind one home router in GlobalProtect Discussions

GlobalProtect issue when try to connect many agents behind one home router

stef — Mon, 08 Mar 2021 09:25:01 GMT

Hello all,

we have let say 10 users behind one home internet router.

They can ping the portal and so on but just one of them can connect. The error of the others is that there is a network problem trying to reach the portal.

Are there any limitations? Was someone experienced the same issues ?

Re: GlobalProtect issue when try to connect many agents behind one home router

Mick_Ball — Mon, 08 Mar 2021 13:32:26 GMT

does that device connect OK when it is the only one connecting.

The GP logs will assist you here, can the user browse to the portal?

check pangps log fo further help.

I do not know of any restriction.

Re: GlobalProtect issue when try to connect many agents behind one home router

BPry — Tue, 09 Mar 2021 02:39:58 GMT

@stef,

There's no built-in limitation on a single public IP address having multiple GlobalProtect sessions associated, that's actually really common to come across. The first thing that I would look at is if it's just this one router in question, or if you can actually duplicate this behavior. It's possible that the NAT type of the home router simply isn't allowing anyone else to form a tunnel to the same public IP address.

The other thing to look at, however if enabled I would hope you would be getting alerts for it, is if you're possibly hitting a DoS limit you have configured. You could have a max-concurrent limit configured so your firewall isn't allowing any additional sessions from that public IP address or something similar.