Hi all.. I'm sure this will be a simple question to answer, but I can't find any explanation. In the following snip from our GlobalProtect traffic log on a PA200:
| 1 | 2/23/2014 17:14 | 2/23/2014 17:14 | GlobalProtect gateway user login succeeded. Login from: 75.89.141.221, User name: w__0. |
| 1 | 2/23/2014 17:14 | 2/23/2014 17:14 | GlobalProtect gateway user logout succeeded. User name: w__0, Reason: remove previous login. |
| 1 | 2/23/2014 17:14 | 2/23/2014 17:14 | GlobalProtect gateway user login failed. Login from: 75.89.141.221, User name: w__0, error: Existing user session found. |
| 1 | 2/23/2014 17:14 | 2/23/2014 17:14 | GlobalProtect gateway user login succeeded. Login from: 75.89.141.221, User name: w__0. |
| 1 | 2/23/2014 5:29 | 2/23/2014 5:29 | GlobalProtect gateway user logout succeeded. User name: w__0, Reason: user session expired. |
| 1 | 2/23/2014 2:28 | 2/23/2014 2:28 | GlobalProtect gateway user login succeeded. Login from: 75.89.141.221, User name: w__0. |
I have the inactivity timeout set to 3hrs, so the user was inactive and the session expired at 5:29. Then they reconnected at 17:14, but how/why was there an existing session? There are other timeouts where the session disappeared after an expiration. Everything seems to be working correctly, this question is just for curiosity's sake.
Thanks
-- michael~
