topic Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent in Next-Generation Firewall Discussions

GP-Agent, Allow with Ticket to disconnect the GP-Agent

AkashThangavel — Sun, 12 Feb 2023 17:48:22 GMT

Hi everyone,

I have a use case to disconnect the GP agent through the ticket. By following up on the admin guide I configured it. But it's not working. I have attached screenshots of the error message.

Configuration part:

In Portal, Agent >App settings >allow users to disconnect GlobalProtect App(Always-on-mode)----Allow with Ticket.

The only configuration I did in regard to Allow with Ticket

Error message, I Tried all the formats of the Ticket number, But It is showing Enter correct ticket

Regards,

Akash Thangavel

Network Security Engineer

Tutelar Tech Labs.

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

raviolli — Wed, 15 Feb 2023 19:41:19 GMT

I am also running into the same exact issue. Have you found the solution yet?

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

AkashThangavel — Thu, 16 Feb 2023 07:25:47 GMT

No brother up to date. We are planning to raise TAC, to find a solution.

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

Todor.Shuev — Tue, 25 Apr 2023 10:20:07 GMT

Hi same problem here.

Any new from PA TAC team?

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

AkashThangavel — Tue, 25 Apr 2023 11:02:10 GMT

Hi shuev,

TAC updated that it's a bug on Pan-OS 10.2, he asked me to downgrade the OS version to 10.1 to achieve this use case.

regards,

Akash Thangavel

Network Security Engineer.

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

popeja — Fri, 05 Jan 2024 13:57:15 GMT

Running into this issue now. Did TAC happen to say when they would be fixing this in a future 10.2.x hotfix/patch?

Edit: We are on 10.2.5 fwiw

Re: GP-Agent, Allow with Ticket to disconnect the GP-Agent

AkashThangavel — Sat, 06 Jan 2024 03:49:36 GMT

Hi Popeja,

Not sure in the 10.2.X, TAC asked us to downgrade to the 10.1.X. Check with the known issue for 11.0 and upgrade to the 11.0

regards,

Akash Thangavel

Network Security Engineer