GlobalProtect Pre-logon tunnel rename doesn't work as expected

[NamalW]

Hi Guys,

We are currently running PanOS8.1.1 have some issues with global protect pre-logon. I have configured pre-logon as per below article.

https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-P...

Problem we have is pre logon works as expected, however when user logged in to the computer, pre logon tunnel getting disconnected and connecting again with user logon.

What we want is prelogon tunnel to be renamed so for user vpn stays connected ater logged in

[hshawn]

Hmmm, this sounds possibly like what we saw when we tried to upgrade to 8.1.1 all of our VPN users got dropped and the ones that could reconnect showed as pre-logon instead of their user names and they kept getting the authentication popups from the GP client. we ended up rolling back and have an open case with PA now

expected behavior was:

pre-logon connections is up->user logs into windows->VPN tunnel switches to user authenticated and pre-logon goes away

[Jonathan_C]

was there ever a resolution for this? I am currently experiencing the same issue with 8.1.13 and GP 5.0.8

[aabozaid]

 I am currently experiencing the same issue with 9.0.7 and GP 5.0.8