Situation: The GloableProtect VPN user can’t get authentication from DUO.
Troubleshooting: When we check the DUO authproxy.log, we see this message: User IP not provided. Authorized Networks policies will not work for this authentication.
Based on ChatGPT:
The error message “User IP not provided. Authorized Networks policies will not work for this authentication” indicates that the Duo proxy server is unable to determine the IP address of the client making the authentication request.
This issue can occur for a few reasons:
- The client is not sending its IP address in the authentication request. This can happen if the client is behind a NAT or firewall that is not passing the IP address to the proxy server.
- The proxy server is not configured to correctly handle the client’s IP address. This can happen if the proxy server is behind a load balancer or other network infrastructure that is not correctly forwarding the client’s IP address.
To resolve this issue, you can try the following:
- Ensure that your client is configured to send its IP address in the authentication request. This may involve configuring your firewall or NAT to forward the IP address to the proxy server.
- Configure the Duo proxy server to correctly handle the client’s IP address. This may involve configuring the proxy server to use an X-Forwarded-For header or another mechanism to obtain the client’s IP address.
- If you are using a load balancer or other network infrastructure, ensure that it is correctly forwarding the client’s IP address to the Duo proxy server.
If none of the above steps resolve the issue, you may need to contact Duo Support for further assistance.
What we find is that the user’s phone notification is off. After having him to turn on the phone Notification, it works.
