topic Global protect with AD integrated issue in General Topics

Global protect with AD integrated issue

Satish — Mon, 17 Nov 2014 08:04:39 GMT

Hi Friends,

How are you. i hope you are doing well. i need one suggestion from you guys... One of the our customer using Global Protect Remote VPN with PACluster Gateway. they have integrated AD with PA deviceand GP users connecting through AD credential and now lots user credential needto change. So will itimpact when GP client connect with PA GW can you suggest what isthe way to connect GP clients when changing credential on AD users how we cancome out from this before changing AD users credentials because to changecredential on GP client application for more than 200 users is very pathetic.

Regards

Satish

Re: Global protect with AD integrated issue

HULK — Mon, 17 Nov 2014 12:51:50 GMT

Hello Satish,

Based on your problem description, it looks, you want to change credentials on GP clients when there is a change in your AD for the corresponding users. If so,you have to uncheck SSO ( single sign on) from portal configuration ( Network > GP portal > Genaral) and use connect method as "on-demand mode". So, while the GP user will initiate the GP connection, he may manually change the saved username/password on GP agent.

•on-demand—Select this option to allow users to establish a connection on demand. With this option, the user must explicitly initiate the connection. This function is primarily used for remote access connections.

•user-logon—When this option is set, the GlobalProtect agent will automatically establish a connection after users log in to their computers. If you select Use single sign-on, the username and password used to log in to Windows is captured by the GlobalProtect agent and used to authenticate.

Hope this helps.

Thanks

Re: Global protect with AD integrated issue

Satish — Tue, 18 Nov 2014 09:43:57 GMT

Hi hulk,

i think you didn't get the my point. my question is are :- GP client with AD integration , if AD User change his credential and login with his Laptop window using new credential then the GP client also need to change manually, is there any Automatic way that user don’t need to change credential in GP client console.

If Point-1 don’t have automatic mechanism then can we integrate user-based certificate using pre-login mechanism, userbased certificate means certificate will be individual for each user

Regards

Satish

Re: Global protect with AD integrated issue

Satish — Wed, 19 Nov 2014 07:48:59 GMT

Hi Hulk, Thanks, issue has been resolve. Regards Satish