This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About nishanna
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About nishanna
11-20-2018
5Posts
5Likes
1Solution
Nov 20, 2018Last Visited
User
Activity
User
Profile
Latest posts by nishanna
| Subject | Views | Posted |
|---|---|---|
| 2446 | 11-20-2018 01:03 PM | |
| 11445 | 11-20-2018 12:48 PM | |
| 11404 | 11-16-2018 07:19 PM | |
| 11409 | 11-16-2018 01:05 PM | |
| 11414 | 11-16-2018 12:06 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 4 Likes | 11-20-2018 12:48 PM | |
| 1 Like | 11-16-2018 01:05 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 3 Likes |
User Badges
Community Statistics
| Member Since | 05-25-2018 10:19 AM |
| Date Last Visited | 11-20-2018 04:24 PM |
| Posts | 5 |
| Total Likes Received | 5 |
11-20-2018
01:03 PM
Yes, it does. The only negative byproduct of this solution is that if both RADIUS servers are available and the user doesn't enter their 2FA within the first 25 seconds, they will receive another 2FA when the 2nd RADIUS server is queried. But otherwise, if RADIUS server 1 is down, after 25 seconds RADIUS server 2 is queried and the user is able to log in.
... View more
11-20-2018
12:48 PM
4 Kudos
Managed to solve the issue with PAN TAC support. These were the changes we made (note that we use 2FA which is why the longer than usual time-outs): - We changed the following configuration in the GUI to allow the necessary time to connect: From FW > Network > Globalprotect > Agent > <agent_config_name> > APP - Portal connection timeout = 90 - TCP connection timeout = 90 - TCP receive timeout = 90 Changed the GP timeout from the cli: # set deviceconfig setting global-protect timeout 50 Reduced the RADIUS timeout slightly in the GUI: FW > Device > Server Profile > RADIUS > Timeout = 25, Retries = 1
... View more
11-16-2018
07:19 PM
Well I made some progress using the "set deviceconfig setting global-protect timeout" command. My 2 RADIUS servers are 35 second timeout, 1 retry so I set the value to 70 seconds. When I log in using the https GP webpage portal, it works perfect. But when I try to log in using the GP software client, I get a 2FA notification as if it's going to work, but then the client shows disconnected. Did you have a similar problem?
... View more
11-16-2018
01:05 PM
1 Kudo
Thank you for the detailed response!!! I'm in the same boat as you and need a longer timeout to allow for two factor authentication. I figured there must be a CLI command to increase the globalprotect timeout to accomodate the timeout values in the RADIUS server configuration. I will give the "set deviceconfig setting global-protect timeout <range is 3-150 sec>" command a shot and see if that works for me. I opened up a support case, but I suspect I'll get the same answer as you. Thanks again.
... View more
11-16-2018
12:06 PM
Just wondering if you managed to find a solution to your problem? I'm having the same issue...
... View more
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks