Panoram XML API - remove users from Global Protect

[John_J]

I am trying to figure out how to remove users from Global Protect using Panorama API.  This is needed for both users connected to Prisma Access and to local firewalls.  

Logout_mobile_user from Prisma Access:

For Prisma Access, I think I know what is needed but I have a question about defining the user for the Gateway and for the Portal.

Logout_mobile_user from Gateway gives the following options when selecting the user:

Logout_mobile_user from Portal gives the following options when selecting user:

For the Gateway I think I would use Domain (domain\username).  For the portal, how do I find the "user name base64 encoded"?

Client-logout using Panorama from a local firewall:

How do I use Panorama to remove a user from a local firewall using XML API?

Is there an API command that can be used from Panorama to identify which local firewall the user is connected to?

Thanks!

[TomYoung]

Hi @John_J ,

I don't think the NGFW forwards GP logged-in users to Panorama.  IF you were using Panorama to redistribute User-ID info then you MAY be able to query the Panorama user-IP mapping table to view the source NGFW.

Sorry!  That's all I got.  Maybe someone else has something good.

Thanks,

Tom