Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About nishanna
About nishanna
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
11-20-2018
5Posts
4Likes
1Solution
Nov 20, 2018Last Visited
User
Activity
User
Profile
Latest posts by nishanna
| Subject | Views | Posted |
|---|---|---|
| 654 | 11-20-2018 01:03 PM | |
| 3187 | 11-20-2018 12:48 PM | |
| 3206 | 11-16-2018 07:19 PM | |
| 3211 | 11-16-2018 01:05 PM | |
| 3218 | 11-16-2018 12:06 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 3 | 11-20-2018 12:48 PM | |
| 1 | 11-16-2018 01:05 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 |
User Badges
Public Statistics
| Date Registered | 05-25-2018 10:19 AM |
| Date Last Visited | 11-20-2018 04:24 PM |
| Total Messages Posted | 5 |
| Total Likes Received | 4 |
11-20-2018
01:03 PM
Yes, it does. The only negative byproduct of this solution is that if both RADIUS servers are available and the user doesn't enter their 2FA within the first 25 seconds, they will receive another 2FA when the 2nd RADIUS server is queried. But otherwise, if RADIUS server 1 is down, after 25 seconds RADIUS server 2 is queried and the user is able to log in.
... View more
11-20-2018
12:48 PM
3 Kudos
Managed to solve the issue with PAN TAC support. These were the changes we made (note that we use 2FA which is why the longer than usual time-outs): - We changed the following configuration in the GUI to allow the necessary time to connect: From FW > Network > Globalprotect > Agent > <agent_config_name> > APP - Portal connection timeout = 90 - TCP connection timeout = 90 - TCP receive timeout = 90 Changed the GP timeout from the cli: # set deviceconfig setting global-protect timeout 50 Reduced the RADIUS timeout slightly in the GUI: FW > Device > Server Profile > RADIUS > Timeout = 25, Retries = 1
... View more
11-16-2018
07:19 PM
Well I made some progress using the "set deviceconfig setting global-protect timeout" command. My 2 RADIUS servers are 35 second timeout, 1 retry so I set the value to 70 seconds. When I log in using the https GP webpage portal, it works perfect. But when I try to log in using the GP software client, I get a 2FA notification as if it's going to work, but then the client shows disconnected. Did you have a similar problem?
... View more
11-16-2018
01:05 PM
1 Kudo
Thank you for the detailed response!!! I'm in the same boat as you and need a longer timeout to allow for two factor authentication. I figured there must be a CLI command to increase the globalprotect timeout to accomodate the timeout values in the RADIUS server configuration. I will give the "set deviceconfig setting global-protect timeout <range is 3-150 sec>" command a shot and see if that works for me. I opened up a support case, but I suspect I'll get the same answer as you. Thanks again.
... View more
11-16-2018
12:06 PM
Just wondering if you managed to find a solution to your problem? I'm having the same issue...
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
