Global protect Private address 0.0.0.0

[BigPalo]

Hi,

We were checking the GP users in PA and we realise that the "Private IP Address" for some users is 0.0.0.0. Another users have the correct private range (10.90.x.x). VPN is working fine but i would like to know why PA assigns 0.0.0.0

[kiwi]

Hi @BigPalo ,

Can you provide some more info where you see this ?

I've seen this when using Duo's radius_server_auto integration with the Palo Alto GlobalProtect Gateway clients or Portal access, Duo's authentication logs may show the endpoint IP as 0.0.0.0.

Maybe you're experiencing this :

https://help.duo.com/s/article/1381?language=en_US

Hope this helps,

-Kiwi.

[BigPalo]

We use GP authenticating against AD. It seems like first time user connects to the VPN and Private IP is OK, but when reconnect the assign IP is 0.0.0.0