topic Re: GlobalProtect Pre-Logon setup uses multiple IP addresses in General Topics

GlobalProtect Pre-Logon setup uses multiple IP addresses

CTW1983 — Wed, 15 Nov 2017 16:05:35 GMT

I have setup GlobalProtect with Pre-Logon configuration, but between the "pre-logon" status and "post-logon" status of the same computer I am getting 2 different IP addresses. For example, during pre-logon I get 172.16.4.201, but as soon as a user logs into Windows I get 172.16.4.200.

Is there any way to keep the IP address the same between the different authentication stages?

The main reason this would be beneficial, is for instances when the IT dept is remoted (VNC) into the user's computer before they login to Windows, then so the remote VNC session does not get dropped when the IP address changes after Windows login.

Is this possible?

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

CTW1983 — Thu, 16 Nov 2017 02:31:20 GMT

Ideas anyone? Or, am I completely missing something?

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

Remo — Sun, 26 Nov 2017 16:12:23 GMT

Hi @CTW1983

What do you have configured in the portal config - app tab and then at the tunnel rename setting?

If you have "-1" there, the pre-logon tunnel should be reassigned to the user without opening a new one.

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

CTW1983 — Tue, 28 Nov 2017 23:57:42 GMT

Looks like "pre-logon tunnel rename timeout" is already set to the default of -1.

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

Clermont — Mon, 13 Jul 2020 13:58:54 GMT

Hi, Is there any update to this post? In our case the clients also receive two ip addresses (for pre-logon and the follwing normal user logon), we would also like to use an ip for both. Regards Marco

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

CTW1983 — Mon, 13 Jul 2020 17:35:05 GMT

Sorry, but I do not have a resolution for this. We opted to configure GlobalProtect as only "user-login (always on)"

Re: GlobalProtect Pre-Logon setup uses multiple IP addresses

MP18 — Mon, 13 Jul 2020 19:06:28 GMT

@CTW1983

I am using the GP pre logon on PAN OS 8.1.15 with GP Agent 5.0.10

I only see 1 IP address for pre logon user and actual user logon.

Regards