GP HIP Profile Applied to Security Policy with Multiple Zones

Hi everyone! 

First LIVE post, hoping to learn about how HIP profiles function when applied to security policies. 

I have a zone created for my Global Protect VPN users, I want to apply a HIP Profile that checks if the computer is domain joined a

Global protect self uninstall on mac

Hi all, I have a peculiar problem that I would appreciate help with.

Myself and the IT team(me being part of the security team) are piloting the GP with Prisma sase as the vpn of choice for our organization. We have two endpoints with it - a mac and

Virtual Adapter was not setup correctly due to a delay (WIN10)

I'm using GlobalProtect Ver 5.2.12-26, on my windows 10 laptop and it has worked just fine for last month, but recently I continue to get the "Virtual Adapter was not setup correctly due to a delay". I've completely uninstalled/reinstalled a number o

AZURE VM Configure GP with certificate

I have an HA pair of VM series Palo Alto Firewalls deployed in Azure. How do I associate the public IP to a certificate on the PA? Are there any instructions on how to do this available? Do I add the public IP or? I cant use dhcp as its an HA config

Global Protect Disconnects Frequently

Hello,

I am running Palo Alto in my network and few team members connects to Global Protect VPN for different partner.

As soon as they connect, VPN keeps disconnecting frequently. If same members connect VPN from home or with hotspot, it works perf

How to Internalize Palo Alto Global Protect?

CSP unsafe setting detected by scanner on PA LSVPN gateway

Hi All-

We have LSVPN configured and working.

However, a recent security scan shows that Content Security Policy (CSP ) issue with the gateway default login script in PA.  

It complains about:

script-src: self

style-src: self

Is there any suggest

Global Protect Azure MFA SAML FIDO Key

Hi,

I configured Global Protect with Azure MFA (SAML).I have set this up as described here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE

Unfortunately I can´t see the FIDO Key in the Login-mask. The other authenti

GlobalProtect Connection Issues in PAN-OS 10.2.7-h3

Hello Friends, 
What troubleshooting steps can I take to address the GlobalProtect connectivity issues, including the "Your GlobalProtect session has been disconnected due to network connectivity issues or session timeouts" notification and the SSL VP

Massive update of GlobalProtecr agents

Best regard

Equipment

Currently in the company we are with the task of updating the GP agent to a more recent version, however, we do not know how much impact there may be on end clients if we update the agent, since they will understand that there a

Can HIP domain use wildcard characters?

May I ask HIP domain can use wildcard characters or not? (Like diagram below)

I read an article that OS cannot use *, but I am not sure whether domain can use wildcard characters or not(just like URL wildcard)

https://knowledgebase.paloaltonetworks.

Get a defined target IP Adress and Subnet via GlobalProtect (PA-460)

I have a target system that I need to access via WebUI. The system is reachable via its IP address 192.168.255.129 with a /24 (255.255.255.0) subnet. Furthermore the system expects a client IP address of 192.168.255.130, any other IP address will

Use HIPS to assign Gateway IP Address for external clients

Hi,

I am looking at how to assign different IP Pool addresses to clients based on a HIPS check.

We are currently achieving this by assigning a different IP Pool to users based on user group membership of an Active Directory group. When the client

VM series Firewall Global protect IP unreachable after rebooting

Hi All,

I'm doing POC on GlobalProtect for one of our customer. As our enviorment is VM series firewall on AWS, we stopped the VM in non-busness hour for costsaving purpose of AWS cloud. But very next day, the Globalprotect servicce IP is not reach

Configure TOTP (Google Authenticator) for GlobalProtect

I have looked at the different support documents and previous discussions but have not gotten much wiser. 

I need to have a handful of users connect to GlobalProtect with TOTP as the second authentication factor. Since the number of users are so low,