Pre-logon issues for users - windows widgets

[Kevin-OHare]

Hello,

I have been having an issue over 2022 in that some users when logging on remotely via Prisma cant connect.  I have tracked it down and it seems to be a fairly new windows widget in windows10 where a weather and location widget loads.

To get around it i had to create a prelogon rule to allow access to external internet services, the logon works as expected. We think we have narrowed it down to the following urls -
*.msn.com/
*.live.com/
*.bing.com
It looks like the windows 10 build tries to connect to these resources before the full tunnel is built. 

Just curious but has anyone else seen this issue and know why this widget would cause the pre-tunnel to fail

regards,

Kevin

[Kevin-OHare]

Hi,

I have spoken to Microsoft and taken logs off an affected laptop. 

It turns out this is the problematic URL - autologon.microsoftazuread-sso.com

If i whitelist this URL then pre-tunnel is unaffected but if i dont a lot of users are getting an issue where their taskbar hangs and they cant login to global protect until they disconnect their wifi and turn it back on.  It must be because the laptops are trying to login to Azure even though our laptops are not Azure joined - they are only Azure registered.

has anyone else seen this before and does anyone know why this would affect the pre-tunnel if not whitelisted

thanks

Kevin