topic Re: Global protect access issue with adm account in GlobalProtect Discussions

Global protect access issue with adm account

JadeJisman — Thu, 28 Nov 2024 02:48:20 GMT

Hi,

We have issues right now on the users with _adm account accessing the server while connected to GP.

Here's the scenario:

1. User connect to GP using normal ad account

2. User is connected to GP

3. User will try to access server via RDP

4. User will input his/her _adm credential on the server

5. Upon checking the firewall level, user are being denied by the firewall because _adm kicked-in and not the normal ad account

hope can anyone share if you encounter this issue with GP 6.2.x

Re: Global protect access issue with adm account

JayGolf — Wed, 04 Dec 2024 02:45:11 GMT

Hi @JadeJisman ,

In the monitor tab, if you filter on the users' IP, do you see the source user actually change from non adm account to adm account? Can you check and share the previous traffic.

Re: Global protect access issue with adm account

JadeJisman — Mon, 16 Dec 2024 04:55:34 GMT

Hi Jay,

Yes I confirm the source user suddenly change after the user login to a server using adm account.

BTW, we are using UID agent and I think that is one of the cause. Our goal is to bypass all adm accounts so it will not take the full control of user traffic on the firewall level.