topic Re: Global Protect and ( error eq 'Existing user session found' ) in General Topics

Global Protect and ( error eq 'Existing user session found' )

PaloAlto18 — Wed, 21 Apr 2021 03:39:18 GMT

Hi Team,

On GP 5.2.5 on GUI logs i see

( status eq failure ) and ( eventid eq gateway-register ) and ( error eq 'Existing user session found' )

is this bad?

what is the reason for this error?

Regards

Re: Global Protect and ( error eq 'Existing user session found' )

BPry — Wed, 21 Apr 2021 15:00:10 GMT

@PaloAlto18,

This is nothing to worry about. It simply means that the user is already registered on the gateway, so it's just going to use the existing user session instead of registering a new session.

Re: Global Protect and ( error eq 'Existing user session found' )

PaloAlto18 — Wed, 21 Apr 2021 17:20:48 GMT

HI @BPry ,

Can you please explain this in more detail and how to reproduce this issue ?

Regards

Re: Global Protect and ( error eq 'Existing user session found' )

nikoolayy1 — Fri, 23 Apr 2021 07:45:09 GMT

What VPN are you using normal VPN with globalprotect APP or Clientless VPN? Do you or your users have any real impact? It is possible that the users first log in the normal VPN then hey try to use the clientless VPN.

You may also have issues where clients disconnect because of a bad network, bad MTU etc., so generate globalprotect logs and check them:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaLCAS

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5XCAS

If you have palo alto 9.1 or newer, you may also see performance metrics from the firewall for the client tunnels:

https://docs-new.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-released-in-gp-app/globalprotect-gateway-latency-reporting

Re: Global Protect and ( error eq 'Existing user session found' )

SubaMuthuram — Fri, 18 Feb 2022 08:40:50 GMT

Hi @BPry

Due to this issue user unable to register the gateway, Same has reflected in GP Logs as Existing user Session found. The users unable to connect to gateway.

Is there anyway to resolve this ?

Re: Global Protect and ( error eq 'Existing user session found' )

BPry — Fri, 18 Feb 2022 08:53:46 GMT

@SubaMuthuram,

I've never seen this error prevent someone from logging in properly. Immediately following this error you should be seeing a 'remove previous login' gateway-logout immediately followed by a gateway-login for the host-id. Effectively the firewall is simply clearing the stale session that wasn't properly shutdown and re-building a new session for the host-id.

Are you saying that you've looked at logging and you aren't seeing it remove the previous login and forming a new connection?