About Nisha_Bharadia

Hello, did this work? allow transparently does not seem to work for downgrading from 6.0.1 to 5.2 versions. ... View more

Hi All,   I am having an issue whereby we have activated CIE on Panorama however no groups or users are coming through.the command s how user cloud-identity-engine client stat" shows 0 for everything. Any ideas?  ... View more

I am also having this issue? any ideas what this could be related too?   Queries received from hosts:6812 Responses returned to hosts:0 Queries forwarded to servers:81744 Responses received from servers:0 Pending TCP:0 Pending UDP:0 ... View more

Hello, did you receive a response to this? we are also seeing this? ... View more

Hello,   We have configured always on GP and are also seeing a couple of sessions showing existing user session found? what does this mean and why does this occur?   Connection Error Existing user session found   Thanks, ... View more

Any update on this with cisco umbrella? ... View more

Thank you! The strange thing is UK users who are apart of the same okta group were logged in fine, i tried signing out and back in and worked like a charm however for USA users connecting to prisma US West node it was failing and the only common thing between them really was few of them had comcast ISP and 2 had ISP Charter /Xfinity however mostly mac big sur users and two windows. They were part of the group mapping i checked via CLI, but what i cannot understand is how UK user apart of the same group worked and USA didnt.. do you notice any SAML errors or is it purley they were failing to match the okta group?  thanks ... View more

Thank you Alexander.   The OS is set to "any" and the group mapping is set to default 1hour however no value has been entered, it just says "default"..   The users are all on Big Sur mac osx and maybe 1 -2 windows users all based in the USA.. no one in the UK is affected..   We were using 5.1.5 Global Protect version however today have updated to 5.2.5..     (T10900)Debug(8339): 03/04/21 08:18:25:129 ----Portal Login starts---- (T10900)Debug( 41): 03/04/21 08:18:25:130 Roaming profile is false (T10900)Debug( 167): 03/04/21 08:18:25:137 profileInfo username testtest, profile path (null), server (null) (T10900)Debug(1912): 03/04/21 08:18:25:141 Unserialized non-empty cookie for portal test.gpcloudservice.com and user test.test@com (T10900)Debug(8353): 03/04/21 08:18:25:141 Cookie exists for saved user testtest@test.com. Update saved user to user. Continue for saml (T10900)Error(8300): 03/04/21 08:18:25:141 GetPassword(): invalid parameter. (T10900)Debug(13270): 03/04/21 08:18:25:141 Failed to get portal saved password. (T10900)Debug(10052): 03/04/21 08:18:25:141 Password is empty. (T10900)Debug( 312): 03/04/21 08:18:25:141 No need to decrypt data with length 0 (T10900)Debug(2046): 03/04/21 08:18:25:142 Portal config digest is retrieved from file C:\Users\testest\AppData\Local\Palo Alto Networks\GlobalProtect\PanPCD_7d7f51be3ae9afe540bbb98a9315ca82.dat. (T10900)Debug(2047): 03/04/21 08:18:25:142 Portal config digest is b76de6f7e7dfac82c2bd01d28dbd9017 (T10900)Debug( 41): 03/04/21 08:18:25:143 Roaming profile is false (T10900)Debug( 167): 03/04/21 08:18:25:150 profileInfo username test.test, profile path (null), server (null) (T10900)Debug(1912): 03/04/21 08:18:25:154 Unserialized non-empty cookie for portal test.gpcloudservice.com and user test.test@test.com (T10900)Debug(1841): 03/04/21 08:18:25:154 Unserialized non-empty cookie for portal test.gpcloudservice.com and pre-logon user. (T10900)Debug(8398): 03/04/21 08:18:25:154 IsInPrelogon() 0, GetPrelogonStatus() 0 (T10900)Debug( 312): 03/04/21 08:18:25:154 No need to decrypt data with length 0 (T10900)Debug(6994): 03/04/21 08:18:25:154 use cached deviceSN (T10900)Debug(6994): 03/04/21 08:18:25:154 use cached deviceSN (T10900)Debug( 323): 03/04/21 08:18:25:154 ClearHipCustomCheckInfo(): pHipCustomCheckInfo is NULL. (T10900)Debug( 85): 03/04/21 08:18:25:154 ClearHipCustomCheckRegKeyInfo(): pHipCustomCheckRegKeyInfo is NULL. (T10900)Debug( 567): 03/04/21 08:18:25:154 pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\PanPortalCfgCriteria_7d7f51be3ae9afe540bbb98a9315ca82.dat (T10900)Debug( 77): 03/04/21 08:18:25:154 Portal config criteria is restored. (T10900)Debug( 567): 03/04/21 08:18:25:154 pan_read_text_from_file(): File does not exist. File: C:\Program Files\Palo Alto Networks\GlobalProtect\PanPortalCfgCriteria_7d7f51be3ae9afe540bbb98a9315ca82.dat (T10900)Debug(8475): 03/04/21 08:18:25:154 m_szDomainAndUsername is test.test@test.com (T10900)Debug(2587): 03/04/21 08:18:25:154 encpostdata, encpostdata=0000020E07B14880, encpostdatalen=1232 (T10900)Debug(2757): 03/04/21 08:18:25:154 REQID=3,IPADDR=165.1.203.228,PORT=443,URL=/global-protect/getconfig.esp,POST=1,PROXY_AUTO=0,PROXY_CFGURL=NULL,PROXY=NULL,PROXY_BYPASS=NULL,PROXY_USER=NULL,PROXY_PASS=****,VERIFY_CERT=0,ADDITIONAL_CHECK=1,SCEP_CERT=,oid= (T10900)Debug(1506): 03/04/21 08:18:25:155 Send response to client for request https_request (T10900)Debug(2867): 03/04/21 08:18:25:264 receive pan_msg_ping, 3 (T10900)Debug( 226): 03/04/21 08:18:25:311 has-config is no and user-group-loaded is yes (T10900)Debug(9112): 03/04/21 08:18:25:311 Use proxy is true (T10900)Debug(9176): 03/04/21 08:18:25:311 No portal configuration. User group is loaded. (T10900)Debug(8868): 03/04/21 08:18:25:311 Clear portal user auth cookie for portal test.gpcloudservice.com and user test.test@test.com. (T10900)Debug(8892): 03/04/21 08:18:25:311 File C:\Users\testtestl\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_7d7f51be3ae9afe540bbb98a9315ca82.dat is deleted (T10900)Debug(8911): 03/04/21 08:18:25:321 File C:\Users\test.test\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_7d7f51be3ae9afe540bbb98a9315ca82.dat is deleted (T10900)Debug(8931): 03/04/21 08:18:25:321 File C:\Users\testestl\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg.dat does not exist (T10900)Debug(8657): 03/04/21 08:18:25:321 No scep profile (T10900)Debug(7625): 03/04/21 08:18:25:321 Return false for saml auth (T10900)Debug(7626): 03/04/21 08:18:25:322 m_preUsername test.test@test.com, IsInPrelogon() 0 (T10900)Debug(1506): 03/04/21 08:18:25:322 Send response to client for request saml-pre-login (T15264)Debug(6028): 03/04/21 08:18:52:245 NetworkConnectionMonitorThread: route change detected. Wait for 3 seconds. (T15264)Debug(4700): 03/04/21 08:18:52:245 No need to check gateway route since no tunnel. ... View more