GlobalProtect "You are not authorized to connect to GlobalProtect Portal" Error

[KarthikMuthukrishnan]

Hi,

We have 2 different vpn portals, we connect using email or secure batch authentication, Email authentication works fine but batch authenticaion does not work ( which was working fine before ) I am getting you are not authorized to access this portal.

And aheads up on this issue.

Thanks

KM 

[Mick_Ball]

Hmmmmmm... I have no idea what secure batch authentication is..

but going by the message, it seems that the authentication has been succesful but the user is not recognised as one listed or included in the following area... Network\Portals\Agent\Configs\User\User Group.

so they cannot be offered a portal config.

[KarthikMuthukrishnan]

Thanks for your reply !!

as ususal AD group created for VPN users to access the GP, they are added to network , portal & gateway correctly. 

Where can I find "agent" in GUI ? and how the make sure USer group is working correctly ?

Thanks in advance 

KM

[Mick_Ball]

to check group membership on CLI

show user group list

this will display all of the groups that you are using.

show user group name "the-group-you-want-to-check"

use quotes just in case you have any spaces in your groups

Where can I find "agent" in GUI

you dont need the agent for group membership so im not sure what you mean..

[Mick_Ball]

you will see the user authenticate in \monitor\system

check the username against the username in the group list. including domain name