topic Re: global protect ldap users have conflict session accessing private network in GlobalProtect Discussions

global protect ldap users have conflict session accessing private network

TowerBersamaGroup — Tue, 14 Apr 2020 06:19:08 GMT

Hi All,

I have setup global protect authenticated by LDAP. Before i started, here is my running version:

- PA Firmware : 8.1.5

- GP Version : 5.0.0

I found odd issue with global protect ldap authenticated user who accessing the private network.

I have logged in global protect with ldap authentication, let's say its "domain\user1". i want to access file sharing network and it's required domain authentication, i authenticated using "domain\administrator". Oddly, my connection is suddenly dropped. i checked on monitoring traffic log, queried by my 'source ip' and it showed that my log traffic changing from "domain\user1" to "domain\administrator" and its affected to change my initial authenticated login global protect with accessing other network. For example, previously (source user "domain\user1" global protect source-ip 172.10.1.63 destination-ip 10.10.1.100) after i authenticated my domain account to access the file server the traffic change to (source user "domain\administrator" global protect source-ip 172.10.1.63 destination-ip 10.10.1.100) it caused the connection dropped because the user is not listed or allowed in the policy.

kindly need help assistance to this problem, have anyone had the similar issue with global protect and ldap ?

any kind of help will be appreciated.

Best Regards,

quay

Re: global protect ldap users have conflict session accessing private network

vathreya — Wed, 15 Apr 2020 00:19:41 GMT

Hi Quay,

Did you log onto the machine using domain\user1 and then logged into File sharing network as domain\administrator or did you log onto machine using domain\administrator account later on? Please clarify.

Re: global protect ldap users have conflict session accessing private network

TowerBersamaGroup — Wed, 15 Apr 2020 03:50:23 GMT

Hi Vathreya,

Thanks for your reply, i logged on to both machine and filesharing using domain\administrator. and then its changing source user to all network i accessed to.

Re: global protect ldap users have conflict session accessing private network

vathreya — Wed, 15 Apr 2020 23:02:41 GMT

Hi Quay,

I still don't quite follow what you're saying:

You also say you're logged into both machine and filesharing using domain\administrator. and then its changing source user to all network.

Did you initially log in as domain\user 1 onto the machine, and then switched user to domain\administrator?

Regards,

Varun

Re: global protect ldap users have conflict session accessing private network

TowerBersamaGroup — Thu, 16 Apr 2020 16:24:36 GMT

"You also say you're logged into both machine and file sharing using domain\administrator. and then its changing source user to all network."

Yes, exactly. as you can see on the capture as attached.

i wonder, can i solve this issue by implementing agent mode ?