GlobalProtect tunnel is temporarily disconnected after signing in to Windows when using pre-logon in NGPA environment

• When signing in to Windows client with GlobalProtect which pre-logon is enabled, the tunnel to the GlobalProtect Gateway is temporarily disconnected.
• The tunnel is reconnected automatically after several tens of seconds.
• The location of the affected Gateway has multiple active IP addresses due to the autoscaling event of the Next Generation Prisma Access (NGPA) feature.

• Prisma Access
• GlobalProtect (Pre-logon enabled to Windows client)
• Next Generation Prisma Access (NGPA)

1. The NGPA environment cannot support the tunnel rename, so the client cannot continue to use the same tunnel with just tunnel rename.
2. It has to establish the GlobalProtect connection again, and there are several tens of seconds of disconnection during the establishing. 

N/A

Please refer to each of the following information, if you need.

GlobalProtect Pre-Logon