Session Timeout Issue - Tunnel Active but User ID Authentication removes

[karthikeyanB]

Dear Team,

We are facing an issue in VPN where in Authentication of users is removed frequently at a random time.

IMPACT :

We have created Source User base policy - Hence once a user session is timed out, browsing of the user is impacted. User needs to relogin and then can access Internet Traffic. However Tunnel is always active and only "User Authentication" gets removed.

1) Browsing error - When the auth of the user is removed, user web browsing traffic gets blocked.

2) Session Browser - We Seen Traffic Details

3) System Logs - we got session timeout notification

4) Traffic Logs - Showing traffic hitting deny rule.

5) URL Logs - Showing Source Users mapped to ip gets removed (Zoom Webex is ip base policy and hence traffic gets routed through that Security Policy)

PAN  OS Version : 9.0.7

Please help to resolve the issue ASAP

Regards

Karthikeyan Balamurugan

[reaper]

did you exclude the GP ip-pool from the user-id agent?

[karthikeyanB]

No we are not ignoring any ids. It happens at a time random time. Session gets end / terminated abruptly