topic What does it mean Stage and Event GlobalProtect Fields? in GlobalProtect Discussions

What does it mean Stage and Event GlobalProtect Fields?

rennersf — Mon, 07 Jun 2021 21:59:08 GMT

Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".

Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout, portal-prelogin, portal-getconfig, portal-auth and gateway-auth.

PS: we have not found anything about this into Palo Alto's official doc.

Thanks a lot for help us.

Re: What does it mean Stage and Event GlobalProtect Fields?

jdelio — Tue, 08 Jun 2021 16:36:24 GMT

@rennersf

Please take a look at this part of the GlobalProtect Admin guide and let me know if this helps at all..

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-app-log-collection-for-troubleshooting/view-the-globalprotect-app-troubleshooting-and-diagnostic-logs-on-the-explore-app/details-within-the-globalprotect-app-troubleshooting-and-diagnostic-logs.html

Re: What does it mean Stage and Event GlobalProtect Fields?

rennersf — Wed, 09 Jun 2021 00:00:39 GMT

Dear @jdelio . I appreciate your help. But it's still not what we're looking for. We need to thoroughly understand each of the GlobalProtect stages and events.

Re: What does it mean Stage and Event GlobalProtect Fields?

MP18 — Tue, 15 Jun 2021 18:38:46 GMT

@rennersf

Please check with your SE if he can get you this info.

Regards

Re: What does it mean Stage and Event GlobalProtect Fields?

William-Wu — Wed, 18 May 2022 20:29:24 GMT

This looks like what you are looking for:
https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/logging-for-globalprotect-in-pan-os/event-descriptions-for-the-globalprotect-logs-in-pan-os

Example:

gateway-tunnel-latency

Indicates GlobalProtect gateway latency provided by a GlobalProtect client. Refer to description for latency reported information, such as Pre-tunnel latency: 10ms or Post-tunnel latency: 1ms

gateway-logout

Indicates a GlobalProtect gateway event for a GlobalProtect client logout.

Re: What does it mean Stage and Event GlobalProtect Fields?

vitol-pkf — Sat, 23 Mar 2024 21:45:13 GMT

might be few years later but actually I am looking for this answer today in 2024

better put the link here for someone needed.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001VA3CAM&lang=en_US%E2%80%A9