Local user passwords problems with GP after upgrade PAN OS

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Local user passwords problems with GP after upgrade PAN OS

L2 Linker

Hi, I've just migrate from PAN OS 5.0.10 to 6.0.7 and GlobalProtect users have got problems with login. They had the password saved on their GP agent, but connection was refused and users were blocked due to intensive login attempts. We're using local users. It seems like users who couln't login are those with same string as user and password. Is there any addressed issue related? I haven't found anything analogous.

Thanks

3 REPLIES 3

L7 Applicator

Check the settings in the following dialog box:

Device tab --- Setup ---Management tab --- Minimum Password Complexity box

Remove the check from "Block user name inclusion" to allow the users to connect.

But you already know you should consider just having them change passwords rather than allow this.  You could then require password change and deny password reuse to get them back online.  and after everyone is changed re-enable the feature.

PApasswordComplex.png 

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

Thanks Steven, but I assured the Minimun Password Complexity was not enabled.

Well, there is really no other place to set this up.  So if this is off there is probably a bug that is using the default settings for password complexity.

I would turn it on and setup the features you need to allow the passwords to work.

If you want to get the bug identified and added to the bug database you could open a ticket with support as well so they can collect the data to pass on to programing.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
  • 2047 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!