Concurrent Session Limiting in global protect

[BigPalo]

Hi,

Is there any way to limit GP connections by user? one session by user

I´d like to change so that it´s a 1user 1 session

Thanks a lot

[BPry]

@BigPalo,

You should be able to accomplish this with a DoS Policy via establishing session limits to the gateway.

PS: Please add your vote to FR #4603 so that this feature is actually implemented directly onto the firewall.  

[Remo]

In rare instances the DoS policy method will prevent legitimate connections (multiple users in the same (wireless) network, garrier grade NAT)

Another solution you can find here: https://live.paloaltonetworks.com/t5/General-Topics/How-to-limit-concurrent-GlobalProtect-connection...

And as mentionned by @BPry add your vote to FR 4603

[enginy]

I know that this is an old post but I would like to share an update for anyone looking for a solution.

In order to achieve that I created a external & standalone program to limit concurrent GlobalProtect sessions/connections per unique user. It can be accessed here:  https://github.com/enginy88/PAN-GPLimiter

This topic also discussed here: https://live.paloaltonetworks.com/t5/general-topics/pan-gplimiter-limit-concurrent-globalprotect-ses...

Hope this helps!