Global Protect impacting PGP Single Sign-on

jloehndorf — Tue, 21 Aug 2012 16:06:03 GMT

Hello,

Just installed Global Protect 1.1.6 for first time and it seems to be interfering with our companies PGP Single Sign-on.

Initial authentication to the System PGP works fine. Normally the system then takes you to your normal windows screen and startup begins. Since the install of the GP you have to authenticate at the normal WINDOWS login screen. Have seent his behavior on Windows 7.

It does not seem to impact PGP or the system otherwise.

Has Anyone run into this before?

Re: Global Protect impacting PGP Single Sign-on

BrutalDismount — Wed, 22 Aug 2012 01:10:49 GMT

From a PGP perspective I can say that we have had to disable the SSO functionality of it completely and went with a static username and password. We rolled out PGP about a year ago to 1000 laptops and it was nothing but trouble. Most of the issues stemmed from password synchronization when users changed their passwords. We even saw users logged in automatically even when their domain accounts were expired (yikes). We also utilize Junipers UAC Odyssey client on the endpoints as well. The issues you are facing are most likely related to the GINA that is being used to "SSO" the user login. GP has its own Gina as well as our Odyssey client. I would make sure that your Gina modules are chained properly and that your protocol binding order is proper. You can try PGP support, but I have found that once Symantec bought them, the support is less then steller.

topic Global Protect impacting PGP Single Sign-on in General Topics

Global Protect impacting PGP Single Sign-on

Re: Global Protect impacting PGP Single Sign-on