General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2835 Views
  • 2 replies
  • 13 Likes

Resolved! Multiple Global Protect gateways on same firewall

I have a PA-3020 that will have two ISP connections. Primary ISP interface will be used for the Global Protect Portal and Primary Gateway using tunnel.1. Is it possible to have a second gateway using tunnel.2 on the same firewall using the secondary

...

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, 

Just wanted to post a message about the Hot Topic right now, which is Covid-19. 

With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers,

...

jdelio by L7 Applicator
  • 39250 Views
  • 43 replies
  • 33 Likes

When will a new GlobalProtectClient GUI/UI be written?

We've been holding off replacing our Cisco Anyconnect clients as the interface of GlobalProtect is a big downgrade for us.

 

Any idea when/if there will be improvements made to the GP UI?

 

At the moment it looks like it was developed by engineers with n

...

GPforWin7.png
anyconnectwin_reconnect2.png
pmc by L2 Linker
  • 5971 Views
  • 4 replies
  • 6 Likes

GlobalProtect Client not Connecting

Hi All,

I'm experiencing a problem with GlobalProtect and I'm hoping I can get some assistance.

 

I'm able to log on to the GlobalProtect Gateway. I successfully log in and Download the agent. However, when I click 'Connect'. I get an error that says

...

Bocsa by L3 Networker
  • 6350 Views
  • 3 replies
  • 0 Likes

Resolved! Can't remove vsys specific SSL TLS Service Profile

This is a strange issue.

 

PA-3020 recently upgraded to 7.0.4.  The firewall is in single vsys mode.

 

I installed new SSL certificates for Global Protect.  Somewhere during the process of installing the new certificate and upgrading to 7.0.4, an ssl

...

Resolved! Trusted Root CA Not Installed on Client?

This is on a PA-3020 running PAN-OS 7.0.4.

 

I've always manually chained certificates when installed an SSL certificate for Global Protect.  I decided to see if I could install the SSL certificate and the Intermediate certificates separately and see

...

Configuring GlobalProtect with Wildcard Certificate

Hi All,

I'm configuring GlobalProtect for the first time and would like to ask a few questions about using a Wildcard certificate to set this up. After going through the below document, I have some questions:

https://live.paloaltonetworks.com/t5/Mana

...

gp1.png
Bocsa by L3 Networker
  • 11144 Views
  • 2 replies
  • 0 Likes

Global Protect Speeds?

Hi, realtively new to PAN, and have some questions related to Global Protect speeds.

I have a win 7 x64 client connected to a gateway on my 3020. 

From the client to the internet over 30mbs of bw

From the PA3020 VPN interface to the itnernet 20mbs of

...

NeilR by L2 Linker
  • 4011 Views
  • 3 replies
  • 0 Likes

Exclude Traffic from the VPN Tunnel with scripts (GP 2.3)

Dear community,

 

have you ever tried to exclude IPs from the VPN tunnel using the GP 2.3 feature:

https://www.paloaltonetworks.com/documentation/70/globalprotect/globalprotect-admin-guide/set-up-the-globalprotect-infrastructure/deploy-agent-settings

...

Hithead by L4 Transporter
  • 2330 Views
  • 0 replies
  • 0 Likes

Resolved! Global Protect Client settings

I Have configured Global protect and can successfully connect via clients. But after the initial instlal the users have to manually put in the port address along with their username and password.

Is there a way to auto populate the portal address so t

...

Global protect and HIP profiles problem

Hi,

 

Lately I´ve been having issues with clients connecting to Global Protect. They pass the HIP match (no warning message is shown when they connect) but still the security policys with the HIP profile doesn´t apply, instead they hit a deny policy. A

...

mgusta by L2 Linker
  • 3718 Views
  • 2 replies
  • 0 Likes