User cannot disconnect GlobalProtect connection with the correct passcode when it is working with pre-logon user

User cannot disconnect GlobalProtect connection with the correct passcode when it is working with pre-logon user

2558
Created On 06/25/24 03:05 AM - Last Modified 03/11/25 22:35 PM


Symptom


  • GlobalProtect App connected for a user configured as pre-logon.
  • When the user tries to disconnect the app with the correct passcode, it does not work.
  • Error message "CPanGPADisableDlg::OnBnClickedDisableDisconnect - CheckPasscode failed".  is seen in PanGPA.log.
20:092 CPanGPADisableDlg::OnBnClickedDisableDisconnect - CheckPasscode failed
27:014 User click cancel in child dialog 7.
Note: when an incorrect password is entered, the message "CDisableDialog::CheckPasscode - passcode-hash mismatch, deny disabling" is seen in the logs.


Environment


  • GlobalProtect (GP) App
  • Supported App versions
  • GP user using  Pre-logon as connect Method 


Cause


  • The behavior is as expected
  • When GlobalProtect is configured for pre-logon, the users cannot disconnect regardless of the portal configuration.


Resolution


Disconnect GlobalProtect connection after logging in with an actual user.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000TotbCAC&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail