WEBUI Session Timing Out

[RH747]

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logged back in after being idle. Starting about 2 weeks ago I cannot log back into the WEBUI under normal circumstances. I get caught in a session expired loop. This has been replicated on my device with 2 separate accounts, but my co-worker does not have this issue leading me to believe the problem is isolated to my device.

I can access the WEBUI on Incognito mode and the firewall via CLI.

Note: We are required to use MS Edge by corporate policy. Using another browser would certainly work, but not in my context indefinitely.

Relevant KB's I've found:

"Session timed out" when logging on using Web GUI (paloaltonetworks.com)

WEBUI session logs out with message: You have been logged out d... - Knowledge Base - Palo Alto Netw...

Troubleshooting steps (tried logging in after each listed step):

• I tried the typical clear cache/cookies for Microsoft Edge
• Repaired MS Edge
• Reinstalled MS Edge
• Deleted all admin sessions via CLI with >delete admin-sessions
  • This resulted in a successful login then reverted back to the same error.
• Adjusted the idle timeout to indefinite to see if that would allow me to login since it can never expire (it did not)
• Rebooted MGMT Plane via CLI with >debug software restart process management-server
• Rebooted entire NGFW
  • This resulted in a successful login then reverted back to the same error.

This isn't a huge issue as I can simply access everything though CLI or incognito... but it's incredibly annoying and I'd like to try and fix it! Has anyone experienced this problem and what was a permanent solution?

Thanks!

[RH747]

Quick update:

I started getting the same message in incognito so my workaround was shot. My last resort was upgrading to the next preferred PAN-OS version. It seems to be working well enough. Only time will tell if it happens again. Fingers crossed.

[RH747]

Second update:

The issue returned shortly after the PAN-OS upgrade. Still searching for a permanent solution.

[Brandon_Wertz]

---

@RH747 wrote:

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logged back in after being idle. Starting about 2 weeks ago I cannot log back into the WEBUI under normal circumstances. I get caught in a session expired loop. This has been replicated on my device with 2 separate accounts, but my co-worker does not have this issue leading me to believe the problem is isolated to my device.

I can access the WEBUI on Incognito mode and via CLI.

Note: We are required to use MS Edge by corporate policy. Using another browser would certainly work, but not in my context.

Relevant KB's I've found:

"Session timed out" when logging on using Web GUI (paloaltonetworks.com)

WEBUI session logs out with message: You have been logged out d... - Knowledge Base - Palo Alto Netw...

Troubleshooting steps (tried logging in after each listed step):

• I tried the typical clear cache/cookies for Microsoft Edge
• Repaired MS Edge
• Reinstalled MS Edge
• Deleted all admin sessions via CLI with >delete admin-sessions
  • This resulted in a successful login then reverted back to the same error.
• Adjusted the idle timeout to indefinite to see if that would allow me to login since it can never expire (it did not)
• Rebooted MGMT Plane via CLI with >debug software restart process management-server
• Rebooted entire NGFW
  • This resulted in a successful login then reverted back to the same error.

This isn't a huge issue as I can simply access everything though CLI or incognito... but it's incredibly annoying and I'd like to try and fix it! Has anyone experienced this problem and what was a permanent solution?

Thanks!

---

When you get automatically logged out there's a button for "login again" (I think.) If you click that button are you able to successfully login?

I've experienced what you're describing on 10.1 and 10.2 PAN-OS release, but I use Chrome not Edge as my browser.  When I see this notification I usually just reload the page and I'm able to login w/o issue.

[KhaleelE]

Try restarting your PC which Pan Os current running?

[RH747]

---

@Brandon_Wertz wrote:

When you get automatically logged out there's a button for "login again" (I think.) If you click that button are you able to successfully login?

I've experienced what you're describing on 10.1 and 10.2 PAN-OS release, but I use Chrome not Edge as my browser.  When I see this notification I usually just reload the page and I'm able to login w/o issue.

---

Unfortunately, I've tried clicking the "Login" button and refreshing to no avail. The issue originated on Edge, but then after using Chrome for a bit it started happening again. Now I'm using Firefox to access the WEBUI and occasionally check Edge/Chrome to see if it magically went away. I will be moving to 10.2 preferred and hoping that it's fixed there. Fixing Edge would be ideal so that I don't have to be an exception to our corporate policy, but whilst Edge does not work, I will be using a different browser for my admin work.

[RH747]

---

@KhaleelE wrote:

Try restarting your PC which Pan Os current running?

---

Several reboots of both my device and firewall have been tried since this occurrence. PANOS 11.1.2-h3, but I will be moving to 10.2 preferred and hoping that it's fixed there. 11.1 is far too unstable. This issue originated in 10.1.11-h5 however.

[trafsta]

I am having the exact same issue now on a PA-3220 (11.1.2-h1) and a PA-440 (11.1.2). Happens in both Edge and Chrome. Incognito/private mode does not work either. CLI works fine. I have switched to Firefox for now, but I am not sure if it will stop working soon also. If anyone else has any ideas on how to solve this I would really appreciate it! I have not yet opened a case with PA but I may soon... I'm worried I may lose access with Firefox soon too...

I will try loading 11.1.3-h1 on both PA's this weekend if I cannot find another solution before then.

[NHB_74]

I'm having the same issues.  Every browser, incognito and firewalls in data centre and office are having the same problem.  has anyone found a workaround?

[trafsta]

For me I am still able to stay logged on under an old Firefox Portable version that I had laying around (104.0.2 (64-bit)). I also have the idle session timeout set to disabled so it does not log me out automatically... my Edge and Chrome (regular or incognito/inprivate) session no longer work, and I am not sure if it is just a matter of time until my Firefox breaks... or perhaps it never will since I am rejecting Firefox software update notifications and staying on this old version will keep it going forever? I suggest that you try an old version of Firefox Portable (if you can find one) and maybe also the Opera web browser and let us know if it works for you.... that might be the workaround we need for now. I have not yet tried Opera, but I have it installed and ready to go should my Firefox ever stop working..

[Andreas.Hupfer · Accepted solution]

since version 11.0.5 of our panorama server we are facing the same problem. As a temporary solution the following is working for me:
1) connect to the device / panorama website

2) press f12 to open the dev tools of the browser

3) navigate to the network ribbon and disable the cache (sorry for the german screenshot)
4) login
5) After login you can close the dev tools

Clearing the browser data is not working for me. Disabling the cache seems to work in edge at the moment.

[RH747]

---

@Andreas.Hupfer wrote:

since version 11.0.5 of our panorama server we are facing the same problem. As a temporary solution the following is working for me:
1) connect to the device / panorama website

2) press f12 to open the dev tools of the browser

3) navigate to the network ribbon and disable the cache (sorry for the german screenshot)
4) login
5) After login you can close the dev tools

Clearing the browser data is not working for me. Disabling the cache seems to work in edge at the moment.

---

That worked! As a temporary solution it works flawlessly... for now at least, haha. Hopefully Palo Alto recognizes this is a problem and addresses it in future releases as this was a major pain to deal with. Our premium support partner couldn't find any solution to this issue, so I'm glad you were able to help out. I will mark this as a solution, albeit more so a temporary workaround until PA resolves it in an official release.

Thanks!

[trafsta]

Unfortunately this doesn't work for me most of the time. If I keep trying to log in a few dozen times, maybe 1 of the 20+ attempts will work, but usually I just get the same error message in both Edge or Chrome:

[JDBailey]

Experiencing the exact same things for about a year now and we've upgraded the OS every time there's a new recommended version.

[trafsta]

Out of curiosity, do you use 1Password to enter the username/password when logging into your PA?