GP-Agent, Allow with Ticket to disconnect the GP-Agent

[AkashThangavel]

Hi everyone,

I have a use case to disconnect the GP agent through the ticket. By following up on the admin guide I configured it. But it's not working. I have attached screenshots of the error message.

Configuration part:

In Portal, Agent >App settings  >allow users to disconnect GlobalProtect App(Always-on-mode)----Allow with Ticket.

The only configuration I did in regard to Allow with Ticket

Error message, I Tried all the formats of the Ticket number, But It is showing Enter correct ticket

Regards,

Akash Thangavel

Network Security Engineer

Tutelar Tech Labs.

[raviolli]

I am also running into the same exact issue. Have you found the solution yet?

[AkashThangavel]

No brother up to date. We are planning to raise TAC, to find a solution.

[Todor.Shuev]

Hi same problem here.

Any new from PA TAC team? 

[AkashThangavel]

Hi  shuev,

TAC updated that it's a bug on Pan-OS 10.2, he asked me to downgrade the OS version to 10.1 to achieve this use case.

regards,

Akash Thangavel

Network Security Engineer.

[popeja]

Running into this issue now. Did TAC happen to say when they would be fixing this in a future 10.2.x hotfix/patch? 

Edit: We are on 10.2.5 fwiw

[AkashThangavel]

Hi Popeja,

Not sure in the 10.2.X, TAC asked us to downgrade to the 10.1.X. Check with the known issue for 11.0 and upgrade to the 11.0

regards,

Akash Thangavel

Network Security Engineer