User Removed From LDAP Authentication Group Still Able to Connect to VPN

cmaciel — Thu, 29 Jan 2026 22:27:43 GMT

Hello everyone,

I have a user who I removed form all VPN LDAP authentication groups about a week ago and they are still able to connect to the VPN. I was thinking it may have to do with the cookie re-auth but we have it set to expire after 24 hours. I am at a loss as to why they are still able to connect.
I was hoping someone has had a similar issue and can point me in the right direction.

Re: User Removed From LDAP Authentication Group Still Able to Connect to VPN

BPry — Thu, 29 Jan 2026 22:36:05 GMT

@cmaciel,

Have you verified that the firewall is actually aware that the user has been removed from the group?

show user group name "CN=Authorized-VPN-Users,OU=Groups,OU=Test,DC=test,DC=root,DC=local" | match bpry [29 ] test\bpry

topic User Removed From LDAP Authentication Group Still Able to Connect to VPN in GlobalProtect Discussions

User Removed From LDAP Authentication Group Still Able to Connect to VPN

Re: User Removed From LDAP Authentication Group Still Able to Connect to VPN