GlobalProtect login window pop-up frequently

[OCfirewallsupport]

Hi All,

Globlal protect login window pop-up frequently after  entering credentials.  i am using GP version 3.0.3-7.

Is anyone have faced similar kind of issue?

[sullivanpj2]

What Pan-OS are you running?

- Peter

[BPry]

As in it wants you to reauthenticate or is it just showing back up again? 

[OCfirewallsupport]

Hi,

Please find the details,

Model PA-3020 

Software Version 7.0.8 

GlobalProtect Agent 3.0.3 

[OCfirewallsupport]

yes, it is ask for reauthenticate .

[BPry]

Youll probably want to enable debug to get the most info but look in the following logs for any issues

appweb3-sslvpn.log- Mail log file

pan_packet_diag.log- Initial SSL request

authd.log- Auth issues for GP logins

rasmgr.log- client login/logout events

The most useful for yourself is likely going to be authd.log and rasmgr.log, but I would go through all of them and see if any issues pop up. Detailed logging on the client end may give you some good information as well. 

[BPry]

I might have listed a bum log, I can't locate the pan_packet_diag log file on my 3020. All others are mp-log 

[bpappas]

I was facing this behavior and I'm not sure why it went away, but it may have been due to the following actions I took.

1. task-bar -> GP icon -> show panel

2. re-enter username and password on the GP panel home tab

3. click connect

i recently had to change my Windows domain password, and perhaps GP failed to update/sync credentials that go to the portal vs. the gateway... 

in any event I haven't seen any GP login windows pop up since I took the actions listed above. 

[jyendrapat]

If you have recently changed password, I would suggest you to try one of the following steps.

1. Re-enter username/password in GP panel.

2. Log out of PC and log back into the PC and see if the issue goes away.

[OCfirewallsupport]

i have tried above options but it is still same.

[forenheith]

Version 6.2.0-89 still displays annoying pop-ups that cover the active application window without permission. This is a highly unprofessional implementation of the re-authentication functionality. Please fix that ASAP.