Pre-logon tunnel was disconnected status after rebooting windows 10 PC

Pre-logon tunnel was disconnected status after rebooting windows 10 PC

1125
Created On 02/18/23 09:29 AM - Last Modified 03/11/25 23:20 PM


Symptom


After Reboot of Windows 10 PC, the Pre-logon tunnel shows as disconnected.


Video②_07min37sec_Prelogon Tunnel_Disconnected status.JPG



Environment


  • GlobalProtect App
  • Supported App versions
  • Connect method: Pre-Logon 


Cause


  • Customer laptop initiated user login immediately after PanGPS starts (machine reboots). 
  • PanGPS.log indicated that "User gujppxf11365667\defaultuser100001 logs in on session 1" happens immediately after PanGPS starts (machine reboots).
(P5104-T5412)Info ( 158): 01/12/23 11:56:36:233 ####################### Start PanGPS service (ver: 6.0.3-38) #######################
(P5104-T5412)Debug(9092): 01/12/23 11:56:36:355 stop capture packets
(P5104-T5412)Debug(1001): 01/12/23 11:56:37:104 PreviousDNSInfo doesn't exist, no need to restore
(P5104-T5412)Debug(6273): 01/12/23 11:56:37:104 Proxy is not disabled before, no need to restore
(P5104-T5108)Debug( 348): 01/12/23 11:56:37:135 Received session change, event type 5, session 1
(P5104-T5108)Debug(1471): 01/12/23 11:56:37:135 srv is NULL
(P5104-T5108)Debug(1482): 01/12/23 11:56:37:135 Session 1, username defaultuser100001.
(P5104-T5108)Debug(1491): 01/12/23 11:56:37:135 Session 1, domain name GUJPPXF11365667.
(P5104-T5108)Info (1526): 01/12/23 11:56:37:135 User gujppxf11365667\defaultuser100001 logs in on session 1
(P5104-T5108)Debug( 348): 01/12/23 11:56:38:064 Received session change, event type 7, session 1
(P5104-T5108)Info (1571): 01/12/23 11:56:38:064 lock off session 1
(P5104-T5412)Debug(  65): 01/12/23 11:56:38:347 Virtual interface driver is initialized
(P5104-T5412)Debug( 115): 01/12/23 11:56:38:347 Get shared translate length 24
(P5104-T5412)Info ( 918): 01/12/23 11:56:38:363 Computer name is GUJPPXF11365667, OS version is Microsoft Windows 10 Pro , 64-bit


 



Resolution


  1. For Pre-logon tunnel to work correctly, machine login should not happen after PanGPS starts (machine reboots). 
  2. User login should happen after customer logs into Windows domain.
  3. Wait for the GlobalProtect connection status from disconnected to connected on the windows login screen before machine login.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kH1ECAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail