topic Re: Global Protect One session One user in General Topics

Global Protect One session One user

pratChamp — Thu, 18 Jul 2019 10:46:49 GMT

GP can support One username login one session or not. If yes where is configuration at GUI

Re: Global Protect One session One user

BPry — Thu, 18 Jul 2019 16:39:30 GMT

Existing feature request 4603 is something you'll want to have your SE add a vote to so that PAN knows you want this feature built into the firewall. At the moment this isn't something native to the platform and the best way to accomplish this is though a script that interacts with the API to ensure that the user only has the number of active sessions open that you feel comfortable with. This is a relatively easy script to make as long as you are comfortable with scripting and using the API in something like PowerShell or Python.

Re: Global Protect One session One user

Remo — Sat, 27 Jul 2019 21:38:38 GMT

@pratChamp an example of a powershell scrpit that does this job I posted here: https://live.paloaltonetworks.com/t5/General-Topics/How-to-limit-concurrent-GlobalProtect-connections-per-user/m-p/202128/highlight/true#M59665

Re: Global Protect One session One user

enginy — Thu, 29 Aug 2024 18:06:30 GMT

I know that this is an old post but I would like to share an update for anyone looking for a solution.

In order to achieve that I created a external & standalone program to limit concurrent GlobalProtect sessions/connections per unique user. It can be accessed here: https://github.com/enginy88/PAN-GPLimiter

This topic also discussed here: https://live.paloaltonetworks.com/t5/general-topics/pan-gplimiter-limit-concurrent-globalprotect-sessions/td-p/596293

Hope this helps!