topic Question about Global protect Pre-Logon Issue in General Topics

Question about Global protect Pre-Logon Issue

Sethupathi — Wed, 26 Jun 2019 09:38:26 GMT

Hi,

I configured GP pre-logon method, But it’s only working in administrator mode even though the user is part of administrator group, it’ not working for normal users.

I followed below KB article,

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEYCA0

In global protect client installed laptops, we are able to connect global protect, add the machine to domain and user to local admin group remotely in the administrator mode. That means Global Protect is working fine. Post basic GP Pre-logon configuration, when we select switch user or reboot laptop and try to login with a normal user, it’s showing the error “Global Protect Disconnected”(Wi-Fi is connected ) because of this we are unable to use Global Protect client in the remote laptops(The system which are not in office).

Can anyone provide your suggestion, why the global protect client is not working (means pre-logon connectivity is not happening) in the laptops when we switch user or log-in as a admin privileged user.

PFA for the error.

Please help us here to fix an issue.

Regards,

Sethupathi M

Re: Question about Global protect Pre-Logon Issue

rdevita — Mon, 14 Oct 2019 16:16:23 GMT

How did you get your pre-logon status to show up on the Windows 10 login screen ? I cannot get it to work on Windows 10 or 7. The Pre-Logon process works, but we do not see the status of the connection. GP Support has not been very helpful.

Re: Question about Global protect Pre-Logon Issue

jdfolkerts — Fri, 24 Jan 2020 18:14:01 GMT

Any answer on your question Rdevita?

Re: Question about Global protect Pre-Logon Issue

BrentGunn — Thu, 02 Apr 2020 14:31:22 GMT

Pretty sure this is directly tied to the bottom GP-Portal-Agent-Agent config.

My readings state you should have 2 different Configs - one for pre-logon and one for user logon.

Conflicting whether the second should be set to prelogon - always on or user-logon (always-on).

If you set this one to prelogon -always on it should (in my testing) get this to show up on the windows logon (GINA) screen.

Now if i could just get prelogon to connect.... Had it working once. Hope that helps you guys.

Re: Question about Global protect Pre-Logon Issue

TulipIT — Tue, 04 Aug 2020 21:11:53 GMT

Did you resolve this? I have this problem too after following all the setup guides

Re: Question about Global protect Pre-Logon Issue

rgunna2020 — Fri, 11 Dec 2020 19:21:10 GMT

i have same problem. How did you resolve?

Re: Question about Global protect Pre-Logon Issue

SanjayKurkute — Thu, 07 Apr 2022 18:28:21 GMT

I have also have same problem.Please help if anyone get the answer