While using Citrix VDI, local Machine services(teams and outlook and other services) are getting disconnected after 10 to 15 minutes..

[kputti]

While using Citrix VDI, local Machine services(teams and outlook and other services) are getting disconnected after 10 to 15 minutes . But, if we stop Global Protect everything is working fine. 

[nikoolayy1]

Have you seen:

%%%%%%%%%%%5

• Specify whether remote desktop connections are permitted over existing VPN tunnels by specifying the 

  User Switch Tunnel Rename Timeout

  . When a new user connects to a Windows machine using Remote Desktop Protocol (RDP), the gateway reassigns the VPN tunnel to the new user. The gateway can then enforce security policies on the new user.

  Allowing remote desktop connections over VPN tunnels can be useful in situations where an IT administrator needs to access a remote end-user system using RDP.

  By default, the 

  User Switch Tunnel Rename Timeout

   value is set to 0, meaning the GlobalProtect gateway terminates the connection if a new user authenticates over the VPN tunnel. To modify this behavior, configure a timeout value from 1 to 600 seconds. If the new user does not log in to the gateway before the timeout value expires, the GlobalProtect gateway terminates the VPN tunnel assigned to the first user.

  Changing the 

  User Switch Tunnel Rename Timeout

   value only affects the RDP tunnel and does not rename a pre-logon tunnel when configured.
• To enable GlobalProtect to preserve the existing VPN tunnel after users log out of their endpoint, specify a 

  Preserve Tunnel on User Logoff Timeout

   value (range is 0 to 600 seconds; default is 0 seconds). If you accept the default value of 

  0

  , GlobalProtect does not preserve the tunnel following user logout.

  This option requires Content Release version __________ and later.

  Consider the following GlobalProtect connection behaviors when you configure GlobalProtect to preserve the VPN tunne

  %%%%%%%%%%%%%%

  Customize the GlobalProtect App (paloaltonetworks.com)

  What Login Credentials Does Palo Alto Networks User-ID Agent Se... - Knowledge Base - Palo Alto Netw...

  Also you can test using clientless VPN for the VDI:

  Supported Technologies (paloaltonetworks.com)