topic Re: GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error in General Topics

GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

KarthikMuthukrishnan — Thu, 28 Feb 2019 13:07:09 GMT

Hi,

We have 2 different vpn portals, we connect using email or secure batch authentication, Email authentication works fine but batch authenticaion does not work ( which was working fine before ) I am getting you are not authorized to access this portal.

And aheads up on this issue.

Thanks

Re: GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

Mick_Ball — Thu, 28 Feb 2019 13:28:23 GMT

Hmmmmmm... I have no idea what secure batch authentication is..

but going by the message, it seems that the authentication has been succesful but the user is not recognised as one listed or included in the following area... Network\Portals\Agent\Configs\User\User Group.

so they cannot be offered a portal config.

Re: GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

KarthikMuthukrishnan — Fri, 01 Mar 2019 11:32:41 GMT

Thanks for your reply !!

as ususal AD group created for VPN users to access the GP, they are added to network , portal & gateway correctly.

Where can I find "agent" in GUI ? and how the make sure USer group is working correctly ?

Thanks in advance

Re: GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

Mick_Ball — Fri, 01 Mar 2019 11:46:49 GMT

to check group membership on CLI

show user group list

this will display all of the groups that you are using.

show user group name "the-group-you-want-to-check"

use quotes just in case you have any spaces in your groups

Where can I find "agent" in GUI

you dont need the agent for group membership so im not sure what you mean..

Re: GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

Mick_Ball — Fri, 01 Mar 2019 12:24:11 GMT

you will see the user authenticate in \monitor\system

check the username against the username in the group list. including domain name