How to disconnect authenticated Live User from PaloAlto FIrewall

[kalzi89]

I need to know , How to forcibly disconnect authenticated Live User from GUI of the PaloAlto Firewall ?

[Raido]

If you talk about GlobalProtect vpn then:

Network > GlobalProtect > Gateways > Remote Users

Find user to disconnect and click on red icon in Logout column.

[JulioMancia]

If i understand this correctly.  On the CLI use "delete admin-sessions" command, you can specify the user.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm6RCAS

[kalzi89]

Hi Raido

This is not about the global protect.I just need to know how to disconnect live user ,where authenticated through capative portal or LDAP.

[kalzi89]

Hi JulioMancia,

Thats means,From GUI We cannot right ?

[Raido]

The following commands can be used to clear the mapping:

> clear user-cache-mp ip <IP-address> //user-cache-mp (Clear management plane user cache)

> clear user-cache ip <IP-address> //user-cache (Clear dataplane user cache)

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClpmCAC