topic Re: WEBUI Session Timing Out in General Topics

WEBUI Session Timing Out

RH747 — Thu, 20 Jun 2024 17:58:38 GMT

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logged back in after being idle. Starting about 2 weeks ago I cannot log back into the WEBUI under normal circumstances. I get caught in a session expired loop. This has been replicated on my device with 2 separate accounts, but my co-worker does not have this issue leading me to believe the problem is isolated to my device.

I can access the WEBUI on Incognito mode and the firewall via CLI.

Note: We are required to use MS Edge by corporate policy. Using another browser would certainly work, but not in my context indefinitely.

Relevant KB's I've found:

"Session timed out" when logging on using Web GUI (paloaltonetworks.com)

WEBUI session logs out with message: You have been logged out d... - Knowledge Base - Palo Alto Networks

Troubleshooting steps (tried logging in after each listed step):

I tried the typical clear cache/cookies for Microsoft Edge
Repaired MS Edge
Reinstalled MS Edge
Deleted all admin sessions via CLI with >delete admin-sessions
- This resulted in a successful login then reverted back to the same error.
Adjusted the idle timeout to indefinite to see if that would allow me to login since it can never expire (it did not)
Rebooted MGMT Plane via CLI with >debug software restart process management-server
Rebooted entire NGFW
- This resulted in a successful login then reverted back to the same error.

This isn't a huge issue as I can simply access everything though CLI or incognito... but it's incredibly annoying and I'd like to try and fix it! Has anyone experienced this problem and what was a permanent solution?

Thanks!

Re: WEBUI Session Timing Out

RH747 — Mon, 20 May 2024 15:53:38 GMT

Quick update:

I started getting the same message in incognito so my workaround was shot. My last resort was upgrading to the next preferred PAN-OS version. It seems to be working well enough. Only time will tell if it happens again. Fingers crossed.

Re: WEBUI Session Timing Out

RH747 — Wed, 19 Jun 2024 19:29:20 GMT

Second update:

The issue returned shortly after the PAN-OS upgrade. Still searching for a permanent solution.

Re: WEBUI Session Timing Out

Brandon_Wertz — Wed, 19 Jun 2024 20:45:47 GMT

@RH747 wrote:

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logged back in after being idle. Starting about 2 weeks ago I cannot log back into the WEBUI under normal circumstances. I get caught in a session expired loop. This has been replicated on my device with 2 separate accounts, but my co-worker does not have this issue leading me to believe the problem is isolated to my device.

I can access the WEBUI on Incognito mode and via CLI.

Note: We are required to use MS Edge by corporate policy. Using another browser would certainly work, but not in my context.

Relevant KB's I've found:

"Session timed out" when logging on using Web GUI (paloaltonetworks.com)

WEBUI session logs out with message: You have been logged out d... - Knowledge Base - Palo Alto Networks

Troubleshooting steps (tried logging in after each listed step):

I tried the typical clear cache/cookies for Microsoft Edge

Repaired MS Edge

Reinstalled MS Edge

Deleted all admin sessions via CLI with >delete admin-sessions

This resulted in a successful login then reverted back to the same error.

Adjusted the idle timeout to indefinite to see if that would allow me to login since it can never expire (it did not)

Rebooted MGMT Plane via CLI with >debug software restart process management-server

Rebooted entire NGFW

This resulted in a successful login then reverted back to the same error.

This isn't a huge issue as I can simply access everything though CLI or incognito... but it's incredibly annoying and I'd like to try and fix it! Has anyone experienced this problem and what was a permanent solution?

Thanks!

When you get automatically logged out there's a button for "login again" (I think.) If you click that button are you able to successfully login?

I've experienced what you're describing on 10.1 and 10.2 PAN-OS release, but I use Chrome not Edge as my browser. When I see this notification I usually just reload the page and I'm able to login w/o issue.

Re: WEBUI Session Timing Out

KhaleelE — Thu, 20 Jun 2024 05:40:52 GMT

Try restarting your PC which Pan Os current running?

Re: WEBUI Session Timing Out

RH747 — Thu, 20 Jun 2024 17:55:37 GMT

@Brandon_Wertz wrote:

When you get automatically logged out there's a button for "login again" (I think.) If you click that button are you able to successfully login?

I've experienced what you're describing on 10.1 and 10.2 PAN-OS release, but I use Chrome not Edge as my browser. When I see this notification I usually just reload the page and I'm able to login w/o issue.

Unfortunately, I've tried clicking the "Login" button and refreshing to no avail. The issue originated on Edge, but then after using Chrome for a bit it started happening again. Now I'm using Firefox to access the WEBUI and occasionally check Edge/Chrome to see if it magically went away. I will be moving to 10.2 preferred and hoping that it's fixed there. Fixing Edge would be ideal so that I don't have to be an exception to our corporate policy, but whilst Edge does not work, I will be using a different browser for my admin work.

Re: WEBUI Session Timing Out

RH747 — Thu, 20 Jun 2024 17:51:22 GMT

@KhaleelE wrote:

Try restarting your PC which Pan Os current running?

Several reboots of both my device and firewall have been tried since this occurrence. PANOS 11.1.2-h3, but I will be moving to 10.2 preferred and hoping that it's fixed there. 11.1 is far too unstable. This issue originated in 10.1.11-h5 however.

Re: WEBUI Session Timing Out

trafsta — Mon, 24 Jun 2024 11:07:22 GMT

I am having the exact same issue now on a PA-3220 (11.1.2-h1) and a PA-440 (11.1.2). Happens in both Edge and Chrome. Incognito/private mode does not work either. CLI works fine. I have switched to Firefox for now, but I am not sure if it will stop working soon also. If anyone else has any ideas on how to solve this I would really appreciate it! I have not yet opened a case with PA but I may soon... I'm worried I may lose access with Firefox soon too...

I will try loading 11.1.3-h1 on both PA's this weekend if I cannot find another solution before then.

Re: WEBUI Session Timing Out

NHB_74 — Thu, 27 Jun 2024 04:18:06 GMT

I'm having the same issues. Every browser, incognito and firewalls in data centre and office are having the same problem. has anyone found a workaround?

Re: WEBUI Session Timing Out

trafsta — Thu, 27 Jun 2024 14:17:11 GMT

For me I am still able to stay logged on under an old Firefox Portable version that I had laying around (104.0.2 (64-bit)). I also have the idle session timeout set to disabled so it does not log me out automatically... my Edge and Chrome (regular or incognito/inprivate) session no longer work, and I am not sure if it is just a matter of time until my Firefox breaks... or perhaps it never will since I am rejecting Firefox software update notifications and staying on this old version will keep it going forever? I suggest that you try an old version of Firefox Portable (if you can find one) and maybe also the Opera web browser and let us know if it works for you.... that might be the workaround we need for now. I have not yet tried Opera, but I have it installed and ready to go should my Firefox ever stop working..

Re: WEBUI Session Timing Out

Andreas.Hupfer — Mon, 01 Jul 2024 05:20:31 GMT

since version 11.0.5 of our panorama server we are facing the same problem. As a temporary solution the following is working for me:
1) connect to the device / panorama website

2) press f12 to open the dev tools of the browser

3) navigate to the network ribbon and disable the cache (sorry for the german screenshot)
4) login
5) After login you can close the dev tools

Clearing the browser data is not working for me. Disabling the cache seems to work in edge at the moment.

Re: WEBUI Session Timing Out

RH747 — Mon, 01 Jul 2024 14:34:17 GMT

@Andreas.Hupfer wrote:

since version 11.0.5 of our panorama server we are facing the same problem. As a temporary solution the following is working for me:
1) connect to the device / panorama website

2) press f12 to open the dev tools of the browser

3) navigate to the network ribbon and disable the cache (sorry for the german screenshot)
4) login
5) After login you can close the dev tools

Clearing the browser data is not working for me. Disabling the cache seems to work in edge at the moment.

That worked! As a temporary solution it works flawlessly... for now at least, haha. Hopefully Palo Alto recognizes this is a problem and addresses it in future releases as this was a major pain to deal with. Our premium support partner couldn't find any solution to this issue, so I'm glad you were able to help out. I will mark this as a solution, albeit more so a temporary workaround until PA resolves it in an official release.

Thanks!

Re: WEBUI Session Timing Out

trafsta — Tue, 02 Jul 2024 12:21:40 GMT

Unfortunately this doesn't work for me most of the time. If I keep trying to log in a few dozen times, maybe 1 of the 20+ attempts will work, but usually I just get the same error message in both Edge or Chrome:

Re: WEBUI Session Timing Out

JDBailey — Thu, 21 Nov 2024 17:51:52 GMT

Experiencing the exact same things for about a year now and we've upgraded the OS every time there's a new recommended version.

Re: WEBUI Session Timing Out

trafsta — Thu, 21 Nov 2024 18:01:40 GMT

Out of curiosity, do you use 1Password to enter the username/password when logging into your PA?

Re: WEBUI Session Timing Out

RH747 — Thu, 21 Nov 2024 18:17:19 GMT

@JDBailey due to a separate issue I factory reset the firewall, reloaded my config and this issue went away. Obviously a very extreme solution to a very minor issue, but a solution none-the-less!

Also, @trafsta, it's worth mentioning that before the fix 1Password was giving me issues and afterwards it works fine so that's a good point to raise and to disable autofill on the firewall webpage if you experience this.

Re: WEBUI Session Timing Out

trafsta — Thu, 21 Nov 2024 18:21:26 GMT

Yes, exactly, part or all of my issue was when 1Password started hitting ENTER after auto-filling the username/password fields on websites (a newer feature that 1Password introduced earlier this year). I think I used to click "Log in" or hit enter quickly after 1Password already did it for me, which meant it sent the login request twice, which I think was part/all of the problem. Now that I do not double-login (after 1Password does it first before me) the problem has gone away.

Re: WEBUI Session Timing Out

sfhs-techserv — Wed, 12 Feb 2025 02:11:41 GMT

I had the same issue with 1pass. Just turned off auto sign in after autofill. I like that feature, wish we could create an exception in the app.

Re: WEBUI Session Timing Out

NHB_74 — Wed, 12 Feb 2025 02:17:30 GMT

Yep I figured that out when i got distracted and it suddenly logged in automatically without me clicking anything! Unbelievable 🙂

Re: WEBUI Session Timing Out

Andreas.Hupfer — Thu, 13 Feb 2025 06:31:54 GMT

I saw the same issue for people who use 1password. 1password behaves differently on the Palo login page. After filling in the access data, the login is initiated directly. In our case, the Palo takes some time to log in. If I press the login button out of reflex during this time, the session expired message also appears.