GlobalProtect pre-logon gateway configuration name shows empty in GP monitor logs description field
389
Created On 07/02/25 08:56 AM - Last Modified 08/08/25 20:32 PM
Symptom
- GlobalProtect monitor logs in pre-logon connection method in configuration stage shows Description: Config name: , Client region: US.
- The config name for the client configuration is not displayed, for example, Config name: DEFAULT, Client region: US.
- GUI: Monitor > Logs > GlobalProtect (the logs below are exported in .csv format)
Environment
- Palo Alto and Prisma Access Firewalls
- Supported PAN-OS
- GlobalProtect Portal
- GlobalProtect Gateway
Cause
- In a pre-logon setup, an empty config name is published every time a tunnel rename is triggered from pre-logon to the actual username.
- Example: Whenever the switch happens between pre-logon and actual user login, the tunnel is renamed from "pre-logon" to "username" and vice versa.
Resolution
- This behavior is expected.
- Gateway agent config name is not displayed in GlobalProtect monitor logs when tunnel rename occurs during pre-logon setup.