Prelogon users connected to Userlogon Gateway

NetFox — Fri, 21 Jun 2024 22:31:06 GMT

I'm working on a Global Protect Setup with the following. A single Portal that leads to 2 Gateways one for prelogon users and then the second for users that have signed into their machines. The tunnel renames itself when the user logs into their machine. However it seems the prelogon user is staying connected to the second gateway after the user logs back out of their machine.

The portal has 2 agent configurations,
- Prelogon - Config selection Criteria, users (Prelogon)
- Userlogon - Config selection Criteria, users (Any)

For the user logon portal I was thinking instead of "Any" I would define the usergroup I have mapped in the firewall not sure if that would help.
At a bit of a loss as to why this is happening the way that it is.

Thanks,

Re: Prelogon users connected to Userlogon Gateway

Arnesh — Thu, 27 Jun 2024 10:43:44 GMT

Hi ,

Please check how the gateway Connection settings are configured; like Login lifetime and Inactivity timeout.
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-gateways/customize-endpoint-session-timeout-settings

topic Prelogon users connected to Userlogon Gateway in GlobalProtect Discussions

Prelogon users connected to Userlogon Gateway

Re: Prelogon users connected to Userlogon Gateway