Strange Gateway change issue on network with Prisma Access GP Client

Having some strange behavior with GP client 6.3.3-711 that runs within the prisma access product. When user is on network, or in office, gp changes gateways at times and changes the timezone of the client computer. The client doesn't have issues off

global protect connection failed authentication failed !!!

Hi All,

We are currently experiencing the following error when attempting to log into Global Protect ( screenshot attached ).  Curiously this is happening after getting prompted via Duo . We are using SAML Identity provider for authentication via D

User ID mapping works on DC but not/intermittent on branches for Intune internal users.

Hi All,

We have a PA-1410 at DC (with GlobalProtect) and PA-440/410 at branches.
Microsoft Intune enrolled devices users authenticate via SAML-Azure AD, non-Intune users via LDAP on-prem AD. User-ID is learned on the DC firewall and redistributed to br

Can you configure clientless VPN in SCM ?

I have the license installed and dynamic updates for clientless installed. We only have the Agent Licensing for GP and Prisma.

We already have Global protect configured though SCM. But I cannot find anything about clientless vpn setup in SCM. I wou

Embedded Browser agent does not work in GlobalProtect SAML Authentication

The customer is using PAN-OS 10.2.4-h2, and configuring GlobalProtect agent setting "Use the Default System Browser for SAML Authentication" to "No" does not disable the default system browser for GlobalProtect SAML authentication.

The embedded bro

GlobalProtect Cert+SAML

Hello,

I'm reaching out to see if anyone has configured GlobalProtect with cert+SAML authentication with multiple gateways across multiple firewalls.  I've been attempting to configure this, however, whenever I use cert+SAML at the gateway and I at

GlobalProtect Name Normalization issue

Hello, I have set up GlobalProtect using AZURE SSO for the sign in and for group mapping I am using LDAP. However, in the GPSVC logs, I see users being returned as domain\\username
2 slashes. This is causing issues with users not being able to get a c

Configuring GlobalProtect via Ansible

Hi,
I'm working on creating an automated Ansible process through which I can configure GlobalProtect in PAN Firewall.

The automaton process I try to create it based on the official Paloalto Repository containing ansible playbooks:
GitHub - PaloAltoNetwo

Inquiry regarding the maximum number of HIP Objects (vs HIP Profiles)

Hi all,

I have a question regarding the system limits for GlobalProtect HIP configurations.

I am trying to find out the maximum number of HIP Objects configurable per device. I am currently using a VM-300, but I am also looking for information applic

gp Always disconnect

I've been using GP recently and it keeps disconnecting and reconnecting.

I'm sure my network is working properly.

I checked the pas log:

(P1336-T19828)Debug(2485): 01/22/26 21:59:49:665 Received a tunnel packet with fragment 0x8D
(P1336-T4260)Debug(1047)

User Removed From LDAP Authentication Group Still Able to Connect to VPN

Hello everyone, 

I have a user who I removed form all VPN LDAP authentication groups about a week ago and they are still able to connect to the VPN. I was thinking it may have to do with the cookie re-auth but we have it set to expire after 24 hour

Globalprotect Slow/Disconnecting randomly

Hi All,

I am having issues with GP disconnecting randomly or slow performance issues, the laptops that it is installed on are Dell Latitude 5450's, over the vast majority there are no discernable issues (circa 2.5k users) however for random users t

GP connction failed

we had an internet outage at out data center this last monday.  it dropped all users off VPN.  the users are trained that if they cant connect to production VPN to try the DR site VPN.  only about 1/3 of the users were able to connect to the DRVPN.