topic Re: Global Protect Pre-Logon in General Topics

Global Protect Pre-Logon

Patrick_Jessett — Mon, 12 Oct 2020 09:44:10 GMT

I'm setting up Global Protect Pre-logon and I have been able to setup the portal and gateway fine. I have hit a brick wall as the only way I have got this working is to log into the laptop and then I log out of the laptop and then the pre-logon is working. When I reboot the laptop and try to connect it is always saying disconnected.

I'm using PAN-OS 9.1.4 and Global Protect Client 5.0.10 and using machine certificates.

I would be very grateful for any help.

Re: Global Protect Pre-Logon

Abdul-Fattah — Mon, 12 Oct 2020 10:16:57 GMT

Hi @Patrick_Jessett,

more info will be needed, what guide you used to Configure Pre-Logon?

Re: Global Protect Pre-Logon

Patrick_Jessett — Mon, 12 Oct 2020 11:13:11 GMT

We had already setup Global protect but as a user-logon (on demand).

This then caused an issue with the remote devices if a users had not logged on to them before so we then thought about moving to pre-logon.

I followed the following articles:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEYCA0

https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-quick-configs/remote-access-vpn-with-pre-logon

Re: Global Protect Pre-Logon

Patrick_Jessett — Wed, 14 Oct 2020 11:18:10 GMT

I have now solved the issue.

It is to do with the machine certificate that is being auto-enrolled on to the laptop. It didn't have the FQDN of the device in the subject field of the machine certificate.