|
On GlobalProtect™ app for Linux endpoints, when a gateway configured
for SAML authentication with the default browser requires
re-authentication—for example, after the gateway session lifetime
expires—and the SAML login is not completed in the browser, the app
does not time out the pending authentication. The app continues to
display Connecting and does not return to a disconnected state,
report an authentication timeout, or retry the connection on its
own. Selecting Connect has no effect while the app is in this state.
This condition is most likely to occur when a gateway
re-authentication begins while the user is away from the endpoint
and the SAML login prompt is left unattended.
Workaround: Restart the GlobalProtect service on the endpoint
by running systemctl restart gpd.service, and then reconnect.
| 