06-09-2023 12:48 AM
Hi @seanmccoy ,
The error indicates that connecting user does not match any of the user config you have defined. First you need to identify if the error is returned by GP Portal or GP Gateway. You should be able to confirm this from GP logs on the firewall -> Monitor -> GlobalProtect Logs, check at what stage of the VPN connection the error is created.
After that look at the relevant agent config (GP Portal -> Agent -> config, or GP Gateway -> Agent -> config). Focus on the "Config Selection Criterias":
- Are you matching config by user/user groups?
- Are you matching config by device OS?
- Are you matching config by device checks?
- Are you matching config by custom checks?
Step 6 from this guide show where those checks are configured - https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-portals/define...
Confirm that you user is matching all of the check for at least one agent configs
