Global Protect count current users not match statistics

[kuschg]

Hey there
The counts are not matching between:

>show global-protect-gateway summary detail

GlobalProtect Gateway: connect-gtw:
Current Users: 675
Previous Users: 4520
current-user : 675

Also with MIB OID .1.3.6.1.4.1.25461.2.1.2.5.1.3.0 panGPGWUtilizationActive Tunnels shows 675 

But  
>show user ip-user-mapping all type GP
Total: 225 users
including pre-logon sessions

How is this to explain?

I mean the currents sessions should only the sessions with mapped IPs.

Thanks for your hint

Regards, Gabriel

[JayGolf · Accepted solution]

Hi @kuschg ,

The 675 count reflects the total number of active GlobalProtect tunnels on the gateway, including connections from multiple devices and pre-logon sessions.

The 225 count reflects the unique GlobalProtect IP-to-user mappings currently available to the firewall for User-ID and policy enforcement.

Since these commands measure different data, the totals will not necessarily match. The difference likely means some users have multiple active sessions, such as connections from multiple devices or recently re-established tunnels.