Global protect access issue with adm account

[JadeJisman]

Hi,

We have issues right now on the users with _adm account accessing the server while connected to GP.

Here's the scenario:

1. User connect to GP using normal ad account 

2. User is connected to GP

3. User will try to access server via RDP

4. User will input his/her _adm credential on the server

5. Upon checking the firewall level, user are being denied by the firewall because _adm kicked-in and not the normal ad account

hope can anyone share if you encounter this issue with GP 6.2.x

[JayGolf]

Hi @JadeJisman ,

In the monitor tab, if you filter on the users' IP, do you see the source user actually change from non adm account to adm account? Can you check and share the previous traffic. 

[JadeJisman]

Hi Jay,

Yes I confirm the source user suddenly change after the user login to a server using adm account.

BTW, we are using UID agent and I think that is one of the cause. Our goal is to bypass all adm accounts so it will not take the full control of user traffic on the firewall level.