topic GlobalProtect log stage and event in GlobalProtect Discussions https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-log-stage-and-event/m-p/562245#M4526 <P>My customer was a Brute force attacked on last week. Today they see GlobalProtect log is from another country (we are in TH) and wonder is this abnormal activity or not.</P> <P>and what is the meaning of "before-login" on stage column and "portal-prelogin" on event column</P> Wed, 18 Oct 2023 10:35:56 GMT Thodsapol 2023-10-18T10:35:56Z GlobalProtect log stage and event https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-log-stage-and-event/m-p/562245#M4526 <P>My customer was a Brute force attacked on last week. Today they see GlobalProtect log is from another country (we are in TH) and wonder is this abnormal activity or not.</P> <P>and what is the meaning of "before-login" on stage column and "portal-prelogin" on event column</P> Wed, 18 Oct 2023 10:35:56 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-log-stage-and-event/m-p/562245#M4526 Thodsapol 2023-10-18T10:35:56Z