topic GlobalProtect Welcome screen links - PanGPA.exe authentication in GlobalProtect Discussions

GlobalProtect Welcome screen links - PanGPA.exe authentication

SShnap — Tue, 30 Aug 2022 22:44:48 GMT

Hi, for long period of time we are using global protect welcome screen including url links to web applications.

Those links are for easy access to internal web applications, lately there was a change on the global protect client behavior which cause two authentication windows pop up to show for the end user double authentication.

One in windows security popup with PanGPA.exe and the other in the default internet browser for web application sign in.

Does anyone else facing the same issue with the PanGPA.exe new features?

I'm trying to remove the PanGPA authentication and leave the browser authentication only without success.

Currently we are using GP version 5.2.11 (I also tested it with newer version 5.2.12 or older version 5.2.6 and 5.0.9) doing the same issue of the double authentication windows.

Re: GlobalProtect Welcome screen links - PanGPA.exe authentication

SShnap — Thu, 01 Sep 2022 22:13:25 GMT

[update]

I noticed that globalprotect is trying to open the links from the welcome popup window and at the same time open them on the default browser.

I found a way to add to the link a command to force the it to be opened in MS-Edge.

microsoft-edge:https://www.google.com

I don't since when it is going like this but this fix works.

Re: GlobalProtect Welcome screen links - PanGPA.exe authentication

nikoolayy1 — Mon, 05 Sep 2022 14:56:14 GMT

Maybe play with the globalprotect portal options "Use Default Browser for SAML Authentication" and "Automatically Launch Webpage in Default Browser Upon Captive Portal Detection".

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-portals/define-the-globalprotect-client-authentication-configurations/customize-the-globalprotect-app

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-agent-configuration-tab/globalprotect-portals-agent-app-tab

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-the-default-browser-for-saml-authenitcation#id51a6b94c-33a1-4657-86d4-16dca38dddc2