topic What's stored in the GlobalProtect encrypted cookie on the endpoint? in GlobalProtect Discussions https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-s-stored-in-the-globalprotect-encrypted-cookie-on-the/m-p/463575#M2438 <DIV><DIV><DIV>Does anyone know what data is stored in the GlobalProtect authentication cookie?</DIV></DIV></DIV><DIV>Is it something like a session token, session data unique to that connected VPN session? Would it contain user credential information if it's not a pre-logon setup? I know it can be setup to only be accepted from the original endpoint IP it was issued to, but is there anything else keeping it from being used on another machine?</DIV> Fri, 04 Feb 2022 23:32:15 GMT claner 2022-02-04T23:32:15Z What's stored in the GlobalProtect encrypted cookie on the endpoint? https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-s-stored-in-the-globalprotect-encrypted-cookie-on-the/m-p/463575#M2438 <DIV><DIV><DIV>Does anyone know what data is stored in the GlobalProtect authentication cookie?</DIV></DIV></DIV><DIV>Is it something like a session token, session data unique to that connected VPN session? Would it contain user credential information if it's not a pre-logon setup? I know it can be setup to only be accepted from the original endpoint IP it was issued to, but is there anything else keeping it from being used on another machine?</DIV> Fri, 04 Feb 2022 23:32:15 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-s-stored-in-the-globalprotect-encrypted-cookie-on-the/m-p/463575#M2438 claner 2022-02-04T23:32:15Z Re: What's stored in the GlobalProtect encrypted cookie on the endpoint? https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-s-stored-in-the-globalprotect-encrypted-cookie-on-the/m-p/463864#M2441 <P>I don't have any particular knowledge of what is in the auth cookie, but I believe it is just a cert-signed session token. I currently use auth cookies to handle login to multiple gateways (different IPs) from a single portal. Just use a unique cert for auth and copy it (and the private key) to multiple PAs.</P> Mon, 07 Feb 2022 15:30:44 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-s-stored-in-the-globalprotect-encrypted-cookie-on-the/m-p/463864#M2441 Adrian_Jensen 2022-02-07T15:30:44Z