03-08-2021 01:25 AM
Hello all,
we have let say 10 users behind one home internet router.
They can ping the portal and so on but just one of them can connect. The error of the others is that there is a network problem trying to reach the portal.
Are there any limitations? Was someone experienced the same issues ?
03-08-2021 06:39 PM
There's no built-in limitation on a single public IP address having multiple GlobalProtect sessions associated, that's actually really common to come across. The first thing that I would look at is if it's just this one router in question, or if you can actually duplicate this behavior. It's possible that the NAT type of the home router simply isn't allowing anyone else to form a tunnel to the same public IP address.
The other thing to look at, however if enabled I would hope you would be getting alerts for it, is if you're possibly hitting a DoS limit you have configured. You could have a max-concurrent limit configured so your firewall isn't allowing any additional sessions from that public IP address or something similar.
03-08-2021 05:32 AM
does that device connect OK when it is the only one connecting.
The GP logs will assist you here, can the user browse to the portal?
check pangps log fo further help.
I do not know of any restriction.
03-08-2021 06:39 PM
There's no built-in limitation on a single public IP address having multiple GlobalProtect sessions associated, that's actually really common to come across. The first thing that I would look at is if it's just this one router in question, or if you can actually duplicate this behavior. It's possible that the NAT type of the home router simply isn't allowing anyone else to form a tunnel to the same public IP address.
The other thing to look at, however if enabled I would hope you would be getting alerts for it, is if you're possibly hitting a DoS limit you have configured. You could have a max-concurrent limit configured so your firewall isn't allowing any additional sessions from that public IP address or something similar.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
