Limiting Global Protect Logins (per user)

[DaveHartnett]

Folks, I cant seem to find the answer doing normal searches, so I'm reaching out here.

Is there any way to limit users so they can only login once at a time, using GP-Client?

(So they dont share accounts, or login on multiple PC's all over the place, etc)?

Thank you...

[TomYoung]

Hi @DaveHartnett ,

There is no way to currently limit the GP sessions per user.  You could try the script in the 2nd URL below.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CligCAC

https://live.paloaltonetworks.com/t5/general-topics/concurrent-global-protect-user/td-p/406974

There is a feature request 4603 -> https://live.paloaltonetworks.com/t5/general-topics/feature-request-list/td-p/209128.

Thanks,

Tom

[enginy]

I know that this is an old post but I would like to share an update for anyone looking for a solution.

In order to achieve that I created a external & standalone program to limit concurrent GlobalProtect sessions/connections per unique user. It can be accessed here:  https://github.com/enginy88/PAN-GPLimiter

This topic also discussed here: https://live.paloaltonetworks.com/t5/general-topics/pan-gplimiter-limit-concurrent-globalprotect-ses...

Hope this helps!