https://live.paloaltonetworks.com/t5/globalprotect-discussions/ip-validation-for-globalprotect-public-ip/m-p/1260706#M7463 <DIV>Hi All,</DIV><DIV>&nbsp;</DIV><DIV><DIV><P>We are currently attempting to complete GlobalSign IP address validation for our GlobalProtect public IP address.</P><P>GlobalSign's validation process requires access to a challenge file under:</P><P>/.well-known/pki-validation/</P><P>However, our understanding is that Palo Alto does not normally host files under this path.</P><P>In addition, HTTP validation via port 80 has not been successful, as requests are redirected to HTTPS (port 443).</P><P>Could you please advise the recommended approach for completing GlobalSign IP validation in a GlobalProtect environment?</P><P>Specifically:</P><UL><LI>Is it possible to host or serve the validation file from the GlobalProtect portal/gateway?</LI><LI>If not, what is the recommended approach to make the validation file accessible?</LI><LI>Would a NAT or redirection to an internal web server be required?</LI><LI>Is the SSL Decryption Opt-out feature relevant to this validation scenario?</LI></UL><P>Any guidance would be greatly appreciated.</P><P>Thank you.</P></DIV></DIV> Mon, 03 Aug 2026 01:57:13 GMT yancheen.wong 2026-08-03T01:57:13Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/ip-validation-for-globalprotect-public-ip/m-p/1260706#M7463 <DIV>Hi All,</DIV><DIV>&nbsp;</DIV><DIV><DIV><P>We are currently attempting to complete GlobalSign IP address validation for our GlobalProtect public IP address.</P><P>GlobalSign's validation process requires access to a challenge file under:</P><P>/.well-known/pki-validation/</P><P>However, our understanding is that Palo Alto does not normally host files under this path.</P><P>In addition, HTTP validation via port 80 has not been successful, as requests are redirected to HTTPS (port 443).</P><P>Could you please advise the recommended approach for completing GlobalSign IP validation in a GlobalProtect environment?</P><P>Specifically:</P><UL><LI>Is it possible to host or serve the validation file from the GlobalProtect portal/gateway?</LI><LI>If not, what is the recommended approach to make the validation file accessible?</LI><LI>Would a NAT or redirection to an internal web server be required?</LI><LI>Is the SSL Decryption Opt-out feature relevant to this validation scenario?</LI></UL><P>Any guidance would be greatly appreciated.</P><P>Thank you.</P></DIV></DIV> Mon, 03 Aug 2026 01:57:13 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/ip-validation-for-globalprotect-public-ip/m-p/1260706#M7463 yancheen.wong 2026-08-03T01:57:13Z