Share GlobalProtec conection on Windows Server

[Casoni]

It is possibile to "share" GP connection on windows server?

Our customer use a Terminal Server to allow external connection and after the first GP VPN  connection, if a second user try to connect a second VPN, GP kill the first one.

With other VPN programs (fortinet etc), this sharing is permitted.

Regards.

[BPry]

@Casoni,

I'm not aware of a way to make this function. Essentially the PanGPS service itself is going to kill the existing session when another user tunnel is created by design, so on a shared system with multiple users attempting to create a tunnel it just isn't going to work. If you don't need a tunnel and you're just using GlobalProtect as user identification, this does work if you have it configured to just not use a tunnel.

Depending on the actual requirement it's possible that you could setup clientless VPN to access what's needed without forming an actual VPN tunnel. That's dependent on actual requirements of course, but it's a potential solution that could be explored for these users.

[Casoni]

Unfortunately the VPN server connection to remotely access internal systems of the company and not only as "user identification".
It is the supplier's policy that does not allow using a direct connection from the consultant's PC to our systems, but this must be mediated through a bridge terminal server, from which the VPN opens.