Global Protect Portal Cached credentials

[MP18]

Under Global potect client logs i see in PAN GPA logs

cached credential for the portal

does it mean it i using username and pw for only the portal connection?

if i do not want portal to use cached credential what config change i need to do?

[Remo · Accepted solution]

If you don't want to use cached credentials you need to change "Save User Credentials" in the Portal>Agent>Authentication config to "no".

I thought if you enable cached credentials then thes - if possible - will be used for portal and gateway.

[aleksandar.astardzhiev]

I believe I hit a bug recently on 4.1.6. The initail config was "Save Username Only" and the client was saving the username, removing the domain that client has entered along with the username. We put "save user credentials" to none, cleared the credentials cache on the host, but still client was remembering the username without domain. So we put 4.0.8 as active version and downgrade the users

[MP18]

there are some issues with 4.1.6

we are using 4.1.4  for now