Disable GlobalProtect Client Ticket is Invalid when Generated with Duration of 0
12285
Created On 05/15/19 22:25 PM - Last Modified 07/28/20 20:34 PM
Symptom
- When "Allow User to Disable GlobalProtect App" is set to "Allow with Ticket"
- Disable GlobalProtect Client
- Generate Ticket from Network -> GlobalProtect -> Portals
- Duration (Minutes) = 0
- Entered Ticket into GP Client
- Client returned:
The ticket is not valid. Please enter a valid ticket
Environment
- Observed in PAN-OS 8.1
- GlobalProtect App Configuration
- Allow User to Disable GlobalProtect App : Allow with Ticket
Cause
- Duration set to 0 is the root cause.
Resolution
Set the Duration to a value greater than 0 when generating ticket.
- Generate Ticket from Network -> GlobalProtect -> Portals
- Duration (Minutes) > 0