topic Re: global protect and OTP in General Topics

global protect and OTP

minow — Thu, 29 May 2014 06:39:38 GMT

hey

our GP environment has PA device in cluster running both portal and gateway,

users authenticate to the portal using OTP and GW is also configured for OTP

we can see that users are authenticating and using GP well but when they put the computer into sleep/shutdown and go to other place then GP wont ask them for password again but will try to authenticate the GP with a Cached OTP

causing users to be locked.

does anyone have idea why is it?

Re: global protect and OTP

HULK — Thu, 29 May 2014 06:50:37 GMT

Hello Minow,

As per my understanding, it will cache the password while in sleep mode, but if you reboot/restart the laptop, it should ask the password.

I am also expecting few more replies on this topic.

Thanks

Re: global protect and OTP

_slv_ — Thu, 29 May 2014 11:16:08 GMT

Hello Minow

You didn't tell us GP version, but from GlobalProtect-1.2.10-RN.pdf you can read:

Addressed Issues 1.2.10

The following issue has been addressed in this release:

• 60763—After coming out of hibernation, a GlobalProtect client was able to connect without being prompted to authenticate. This occurred even though the user had been unable to save authentication credentials and the option to Allow user to save password was cleared in the GlobalProtect portal configuration (Network > GlobalProtect Portals > Client Configuration). This issue has been resolved so that when the Allow user to save password option is cleared in a GlobalProtect portal configuration, the user is always prompted to enter credentials to authenticate.

Please upgrade to 1.2.10 and try

With regards

Slawek

Re: global protect and OTP

minow — Thu, 29 May 2014 14:26:04 GMT

hey

we are using the 2.0.1 version of GP client

"allow user to save password" is unchecked

and we are using on demand mode

Re: global protect and OTP

_slv_ — Thu, 29 May 2014 14:44:21 GMT

Even that you don't use 1.2.x I recommended to upgrade to 2.0.2 and if it will happen again create a support case.

Slawek