topic Re: Global Protect logging out right after it logs in in General Topics

Global Protect logging out right after it logs in

Shuttermed — Sat, 28 Oct 2017 07:16:52 GMT

On the PAN 5020 I can see in logging that user successfully authenticates with MFA and radius but within a second it says the user has logged off. I know that in fact the user did not log off. I hope to grab some logs at the client next week. But I figured I'd ask the hive mind if anyone has ever seen this symptom and what they found. Thanks.

Re: Global Protect logging out right after it logs in

Mick_Ball — Sat, 28 Oct 2017 08:13:41 GMT

Are they using “one time passcodes”

if so then the portal will auth ok but GP will re-use the passcode for gateway and radius will reject.

If so you need to configure authentication overide to generate cookies.

Re: Global Protect logging out right after it logs in

Mick_Ball — Sat, 28 Oct 2017 08:17:07 GMT

Or.... perhaps the assigned ip for GP is within the same subnet as the client ip. If so then you will need to add a second ip range to your pool.

Re: Global Protect logging out right after it logs in

Mick_Ball — Sat, 28 Oct 2017 08:30:51 GMT

Having said that... both of the above will dislpay a message in system log. Im sure you would have noticed.

Re: Global Protect logging out right after it logs in

Mick_Ball — Thu, 02 Nov 2017 16:05:55 GMT

Hi @Shuttermed.

did you ever resolve this issue or get the client logs.