topic Re: Retain Connection on Smart Card Removal behavior on GP in GlobalProtect Discussions

Retain Connection on Smart Card Removal behavior on GP

nikoo — Tue, 09 Mar 2021 07:43:20 GMT

Hello,

There are Smart Cards being used for the GP authentication. One of the options for Windows endpoints is to disconnect the GP as soon as Smart Card is removed and that was tested, option in the app settings: "Retain Connection on Smart Card Removal" set to No.

But the result after removing the Smart Card is that prompt is shown to the user with two options: OK or Cancel. If clicking OK - GP is disconnected and no new connection can be established as there is no Smart Card connected. If clicking Cancel - connection is retained, all the previous resources work as expected and there's nothing preventing user to continue.

Is this really expected behavior? Is anyone using this feature and may have any input?

Re: Retain Connection on Smart Card Removal behavior on GP

jdelio — Tue, 09 Mar 2021 21:35:24 GMT

I understand the request, and the fact that the user is given an option nullifies that option..

I am researching to see if there is anything else that needs to be done to enforce this option without the ability to "cancel".

Re: Retain Connection on Smart Card Removal behavior on GP

jdelio — Fri, 12 Mar 2021 22:55:27 GMT

Just an update.. talking with an internal resource about this.. and we will have to dig a little deeper into this as this does not look like that is working as designed.

I will update with more info as soon as we have it.

Re: Retain Connection on Smart Card Removal behavior on GP

nikoo — Tue, 16 Mar 2021 12:43:04 GMT

Thank you for getting back to me! Will wait for the update.

Re: Retain Connection on Smart Card Removal behavior on GP

pshanubhog — Wed, 21 Jul 2021 13:02:56 GMT

GP 5.2.8 will carry a fix for this issue under Bug-ID GPC-12699