- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
09-09-2026 05:53 AM
Hi everyone,
i ran over an cookie generation issue with my GlobalProtect Portal.
To minimize login requests we are generating Authentication override cookies on the portal side and set the lifetime on the gateway side to 5 minutes.
The first time i connect to the portal (windows client) the cookie is issued and logged in gp logs 'portal-gen-cookie', with the gateway accepting the authentication override.
When i reboot the windows client after 10 minutes and again authenticate against the portal, the portal doesn't generate a new cookie.
The gateway login fails and the gp logs say 'Cookie expired'.
Only when delete the cookie files in localappdata the portal is generating a new one.
Cookie generation on the gateway side is working on every login, but is not helpful in our case.
Am i missing something?
We are using PAN-OS 12.2.3 and Globalprotect 6.3.3-c1121
09-09-2026 12:24 PM - edited 09-09-2026 12:24 PM
Monitor > GlobalProtect
With filter " ( eventid eq portal-auth ) and ( status eq success )" you confirm that workstation authenticates to portal both times?
Maybe GP agent bypassed logging into portal and used cached gateway config during second login?
If workstation authenticated to portal both times then filter "( eventid eq portal-gen-cookie )" shows up only for first login event?
09-09-2026 11:46 PM
When i restart the windows machine, it directs me to the portal everytime.
Cookie lifetime on the gateway side is set to 5 minutes.First Login
After >5 MinutesSecond Time, no new cookie generated
Every login after no new cookie is generated. It stays expired, and i have to authenticate twice...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!

