How to Configure automatic restoration of SSL VPN tunnels?

How to Configure automatic restoration of SSL VPN tunnels?

1692
Created On 05/19/20 00:57 AM - Last Modified 06/20/25 20:05 PM


Objective


  • To Allow or prevent the GlobalProtect app from automatically reestablishing the VPN tunnel for specific gateways by configuring automatic restoration of SSL VPN tunnels.
  • This is normally done when the GlobalProtect connection frequently losses connection due to network instability or a change in the endpoint state, 


Environment


  • Palo Alto Firewalls
  • GlobalProtect Gateway
  • Connection Settings


Procedure


  1. In the GlobalProtect Gateway Configuration dialog, select Agent > Connection Settings.
  2.  Configure one of the following options for Authentication Cookie Usage Restrictions:
  3. This is explained in "Automatic Restoration of VPN Tunnels"

           • To prevent the GlobalProtect app from automatically reestablishing the VPN tunnel for this gateway, Disable Automatic Restoration of SSL VPN.
          • To allow the GlobalProtect app to automatically reestablish the VPN tunnel for this gateway, disable (clear) the option to Disable Automatic Restoration of SSL VPN (default

VPN Tunnel Restoration settings 

          



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U6xCAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail