GP portal login page remains unavailable after unblocking IP

Carracido — Tue, 17 Jun 2025 09:02:43 GMT

Dear community!

I have configured a vulnerability profile to make use of threat ID 40017 in order to prevent brute force attacks on globalprotect portal page. Followed this article:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJ2CAK

It works well but once the offender IP has been blocked, if I remove the IP from block-table with command "debug dataplane reset dos zone <ZONE> block-table source <IP>" and I try to login again, the portal page is not available, I need to wait for the duration of the blocking time to be expired before I can get to the GP portal login page again. I have tried with different Pan-OS in 10.2 and 11.1 trains.

Do you know if this working as per design or maybe a bug that wasn´t fixed and carried through different Pan-OS??

Thank you in advanced!

Re: GP portal login page remains unavailable after unblocking IP

BPry — Tue, 17 Jun 2025 19:25:53 GMT

@Carracido,

I would recommend opening a ticket with TAC and reporting the behavior. Outside of initial configuration and dialing-in the time attribute settings that you have set, most people wouldn't have a reason to utilize this command to lift this block. I would not expect this to be expected behavior seeing as the debug command is supposed to clear the listing without regard for duration, so I'm guessing that this is a bug that people just haven't noticed because it would be an infrequent action.

topic GP portal login page remains unavailable after unblocking IP in General Topics

GP portal login page remains unavailable after unblocking IP

Re: GP portal login page remains unavailable after unblocking IP