Pre-logon tunnel was disconnected status after rebooting windows 10 PC
1125
Created On 02/18/23 09:29 AM - Last Modified 03/11/25 23:20 PM
Symptom
After Reboot of Windows 10 PC, the Pre-logon tunnel shows as disconnected.
Environment
- GlobalProtect App
- Supported App versions
- Connect method: Pre-Logon
Cause
- Customer laptop initiated user login immediately after PanGPS starts (machine reboots).
- PanGPS.log indicated that "User gujppxf11365667\defaultuser100001 logs in on session 1" happens immediately after PanGPS starts (machine reboots).
(P5104-T5412)Info ( 158): 01/12/23 11:56:36:233 ####################### Start PanGPS service (ver: 6.0.3-38) ####################### (P5104-T5412)Debug(9092): 01/12/23 11:56:36:355 stop capture packets (P5104-T5412)Debug(1001): 01/12/23 11:56:37:104 PreviousDNSInfo doesn't exist, no need to restore (P5104-T5412)Debug(6273): 01/12/23 11:56:37:104 Proxy is not disabled before, no need to restore (P5104-T5108)Debug( 348): 01/12/23 11:56:37:135 Received session change, event type 5, session 1 (P5104-T5108)Debug(1471): 01/12/23 11:56:37:135 srv is NULL (P5104-T5108)Debug(1482): 01/12/23 11:56:37:135 Session 1, username defaultuser100001. (P5104-T5108)Debug(1491): 01/12/23 11:56:37:135 Session 1, domain name GUJPPXF11365667. (P5104-T5108)Info (1526): 01/12/23 11:56:37:135 User gujppxf11365667\defaultuser100001 logs in on session 1 (P5104-T5108)Debug( 348): 01/12/23 11:56:38:064 Received session change, event type 7, session 1 (P5104-T5108)Info (1571): 01/12/23 11:56:38:064 lock off session 1 (P5104-T5412)Debug( 65): 01/12/23 11:56:38:347 Virtual interface driver is initialized (P5104-T5412)Debug( 115): 01/12/23 11:56:38:347 Get shared translate length 24 (P5104-T5412)Info ( 918): 01/12/23 11:56:38:363 Computer name is GUJPPXF11365667, OS version is Microsoft Windows 10 Pro , 64-bit
Resolution
- For Pre-logon tunnel to work correctly, machine login should not happen after PanGPS starts (machine reboots).
- User login should happen after customer logs into Windows domain.
- Wait for the GlobalProtect connection status from disconnected to connected on the windows login screen before machine login.