topic Re: can one user have more than one connection to a gateway? in GlobalProtect Discussions

can one user have more than one connection to a gateway?

JimSlifko — Wed, 19 Apr 2023 13:29:37 GMT

we have a PA-850 with one gateway that is configured for user VPN access.

It has been asked if users are able to have multiple connections to the gateway at once, and, if so, how to disable this feature.

Re: can one user have more than one connection to a gateway?

BPry — Thu, 20 Apr 2023 01:07:28 GMT

@JimSlifko,

One user can have multiple devices associated to the same gateway by default without any issue at all. If you want to limit this default behavior, you need to use a script to monitor sessions and to logout users who have multiple sessions active at the same time. An example script by @Remo can be found HERE that you can use as a baseline and customize to fit your needs and work within your environment.

Re: can one user have more than one connection to a gateway?

enginy — Thu, 29 Aug 2024 18:10:15 GMT

I know that this is an old post but I would like to share an update for anyone looking for a solution.

In order to achieve that I created a external & standalone program to limit concurrent GlobalProtect sessions/connections per unique user. It can be accessed here: https://github.com/enginy88/PAN-GPLimiter

This topic also discussed here: https://live.paloaltonetworks.com/t5/general-topics/pan-gplimiter-limit-concurrent-globalprotect-sessions/td-p/596293

Hope this helps!