GlobelProtect portal started failing authentications, was fine this morning

Argentus — Sun, 24 Mar 2024 00:23:31 GMT

Our normal firewall guy is out on extended leave starting last Friday, and I am pretty much a neophyte with this system.

Here's what I've got. We've got 2 portals as follows portalA.ourdomain.com and portalB.ourdomain.com. They were both working fine until this morning when portalB stopped authenticating users. It fails whether you use the VPN client or if you go directly to that URL. It tells everybody they have invalid credentials. PortalA still works just fine with both VPN client and URL.

1. There are 3 remote users who are still connected to B who have never been booted. Those connections seem fine and keep generating gateway-hip-checks and gateway-tunnel-latency events in the GlobalProtect logs in the firewall portal. But no one else can connect.

2. When I intentionally try to log into Portal A with bad credentials, I get an error under "Monitor - System" for "auth-fail." When I try to log into Portal B with any credentials, good or bad, no event is generated.

3. In the client logs, "prelogin to portal" does not appear to be returning an error but I also don't see any "portal-prelogin" events being generated under Logs - GlobalProtect in the firewall portal.

I'm uploading the client log. Any ideas would be welcome. Thanks.

topic GlobelProtect portal started failing authentications, was fine this morning in GlobalProtect Discussions

GlobelProtect portal started failing authentications, was fine this morning