Session Timeout Issue - Tunnel Active but User ID Authentication removes

karthikeyanB — Tue, 09 Jun 2020 09:02:25 GMT

Dear Team,

We are facing an issue in VPN where in Authentication of users is removed frequently at a random time.

IMPACT :

We have created Source User base policy - Hence once a user session is timed out, browsing of the user is impacted. User needs to relogin and then can access Internet Traffic. However Tunnel is always active and only "User Authentication" gets removed.

1) Browsing error - When the auth of the user is removed, user web browsing traffic gets blocked.

2) Session Browser - We Seen Traffic Details

3) System Logs - we got session timeout notification

4) Traffic Logs - Showing traffic hitting deny rule.

5) URL Logs - Showing Source Users mapped to ip gets removed (Zoom Webex is ip base policy and hence traffic gets routed through that Security Policy)

PAN OS Version : 9.0.7

Please help to resolve the issue ASAP

Regards

Karthikeyan Balamurugan

Re: Session Timeout Issue - Tunnel Active but User ID Authentication remove

reaper — Wed, 10 Jun 2020 09:54:14 GMT

did you exclude the GP ip-pool from the user-id agent?

Re: Session Timeout Issue - Tunnel Active but User ID Authentication remove

karthikeyanB — Thu, 11 Jun 2020 10:04:19 GMT

No we are not ignoring any ids. It happens at a time random time. Session gets end / terminated abruptly

topic Session Timeout Issue - Tunnel Active but User ID Authentication removes in General Topics

Session Timeout Issue - Tunnel Active but User ID Authentication removes

Re: Session Timeout Issue - Tunnel Active but User ID Authentication remove

Re: Session Timeout Issue - Tunnel Active but User ID Authentication remove