Panoram XML API - remove users from Global Protect

John_J — Tue, 09 Jan 2024 17:59:37 GMT

I am trying to figure out how to remove users from Global Protect using Panorama API. This is needed for both users connected to Prisma Access and to local firewalls.

Logout_mobile_user from Prisma Access:

For Prisma Access, I think I know what is needed but I have a question about defining the user for the Gateway and for the Portal.

Logout_mobile_user from Gateway gives the following options when selecting the user:

Logout_mobile_user from Portal gives the following options when selecting user:

For the Gateway I think I would use Domain (domain\username). For the portal, how do I find the "user name base64 encoded"?

Client-logout using Panorama from a local firewall:

How do I use Panorama to remove a user from a local firewall using XML API?

Is there an API command that can be used from Panorama to identify which local firewall the user is connected to?

Thanks!

Re: Panoram XML API - remove users from Global Protect

TomYoung — Wed, 10 Jan 2024 21:36:40 GMT

Hi @John_J ,

I don't think the NGFW forwards GP logged-in users to Panorama. IF you were using Panorama to redistribute User-ID info then you MAY be able to query the Panorama user-IP mapping table to view the source NGFW.

Sorry! That's all I got. Maybe someone else has something good.

Thanks,

Tom

topic Re: Panoram XML API - remove users from Global Protect in GlobalProtect Discussions

Panoram XML API - remove users from Global Protect

Re: Panoram XML API - remove users from Global Protect