GlobalProtect: 连接到 PanGPA.exe 时 Windows 安全认证弹出窗口GlobalProtect门户/网关
7605
Created On 04/14/22 08:13 AM - Last Modified 03/24/23 07:37 AM
Symptom
- 用户得到一个Windows 安全提示显示PanGPA.exe连接时需要身份验证GlobalProtect门户/网关
- PanGPA.log显示消息“连接等待时间过长,显示器仍在工作……”
(P7560-T2392)Debug( 325): 03/03/22 15:34:46:708 CPanSAMLView::OnDocumentComplete - a html page pop up, potential the SAML authentication login page
(P7560-T2392)Debug( 688): 03/03/22 15:34:47:020 Receive inactive message.
(P7560-T2392)Debug( 482): 03/03/22 15:34:50:088 CPanSAMLDlg::HideViewImpl - view is visible now.
(P7560-T2392)Debug(1416): 03/03/22 15:34:53:220 Wait too long in connecting, display still working...
Environment
- GlobalProtect App使用 Azure 进行身份验证 SAML
- PAN-OS firewall 配置有GlobalProtect门户/网关
- 视窗 OS
Cause
- 视窗firewall在用户机器中阻止来自GlobalProtectPanGPA过程
Resolution
- 在 Windows 中允许 PanGPA.exe firewall