topic Concurrent Session Limiting in global protect in General Topics

Concurrent Session Limiting in global protect

BigPalo — Fri, 13 Jul 2018 09:53:18 GMT

Hi,

Is there any way to limit GP connections by user? one session by user

I´d like to change so that it´s a 1user 1 session

Thanks a lot

BPry — Fri, 13 Jul 2018 14:28:28 GMT

You should be able to accomplish this with a DoS Policy via establishing session limits to the gateway.

PS: Please add your vote to FR #4603 so that this feature is actually implemented directly onto the firewall.

Remo — Sun, 15 Jul 2018 06:48:04 GMT

In rare instances the DoS policy method will prevent legitimate connections (multiple users in the same (wireless) network, garrier grade NAT)

And as mentionned by @BPry add your vote to FR 4603

enginy — Thu, 29 Aug 2024 18:05:17 GMT

I know that this is an old post but I would like to share an update for anyone looking for a solution.

In order to achieve that I created a external & standalone program to limit concurrent GlobalProtect sessions/connections per unique user. It can be accessed here: https://github.com/enginy88/PAN-GPLimiter

This topic also discussed here: https://live.paloaltonetworks.com/t5/general-topics/pan-gplimiter-limit-concurrent-globalprotect-sessions/td-p/596293

Hope this helps!