How to Remote Disconnect SSL-VPN or GlobalProtect Users
99287
Created On 09/25/18 19:38 PM - Last Modified 04/13/23 03:05 AM
Symptom
This article describes how to remote disconnect GlobalProtect users in Palo Alto Networks
Environment
- PAN-OS 8.1 and above.
- Palo Alto Firewall.
- GlobalProtect Configured.
Resolution
Once the user is connected using the GlobalProtect Client, the following options can be used to force a disconnect remotely from the firewall management.
GUI:
- Go to Network > GlobalProtect > Gateways
- Click on Remote Users
- Find the Logout option under the Current User in the last column
- Click on the Red icon to disconnect the user
From the CLI:
To force logout all GlobalProtect users
> request global-protect-gateway client-logout-all
To force logout individual user
> request global-protect-gateway client-logout user <username> gateway <gateway name> reason force-logout computer <computer-name>
example:
> request global-protect-gateway client-logout user sndp gateway GP reason force-logout computer DESKTOP-U34SJ9Q
For Prisma access where GlobalProtect on Cloud is managed by the Panorma,
- GUI: Panorama > Cloud Service > Status
- Under Moble Users tab, Click on Current Users
- Select the user and click Logout