topic GP Client automatically reconnects to an GP portal without any prompt for authentication after disconnecting and reconnecting to respective portal in GlobalProtect Discussions

GP Client automatically reconnects to an GP portal without any prompt for authentication after disconnecting and reconnecting to respective portal

tamilvanan — Tue, 06 Jul 2021 16:40:28 GMT

Hi All,

We have GP Client 5.2.7 installed in the system and PAN OS 9.1.7.

When we login to the GP Portal from GP client for the first time and after that we tried to disconnect and reconnect to the same portal. While reconnecting we are not prompted with the authentication message.

When we uninstall and reinstall the GP client and do the same activity(Disconnecting and reconnecting) to the portal we are prompted with authentication for password and username.

Is this an expected behavior .

We are using User On-Demand login/No authentication cookie over-ride settings had been configured/ preserve tunnel on user-log of is set to zero.

Also what is the purpose of disconnect button on the GP Client. Is it to logout the users from GP Portal.

All the devices were Windows. We have LDAP server and using it for authentication of GP users.

Re: GP Client automatically reconnects to an GP portal without any prompt for authentication after disconnecting and reconnecting to respective porta

Mick_Ball — Tue, 06 Jul 2021 17:40:30 GMT

it may be that you are set to save user credentials, this is set in the portal agent configs as below.

yes the disconnect button will end the vpn tunnel to your gateway.

Re: GP Client automatically reconnects to an GP portal without any prompt for authentication after disconnecting and reconnecting to respective porta

tamilvanan — Wed, 18 Aug 2021 04:23:08 GMT

Hi @Mick_Ball . We had checked on this further. We are using LDAP(Windows 2012) for GP users authentication and the same Windows LDAP for user to login to their LAPTOP.

We had previously enabled Single Sign On for windows on GP Portal settings which had allowed the user to sign in into GP without any authentication once they login into their device.

Changed the SSO for windows to NO on the GP Portal setting.

Also under authentication menu of GP Portal and Gateway we had changed the

"Allow Authentication with User Credentials OR Client Certificate" to Yes as we are not using cert based authentication only password.

This had resolved over issue.