This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Panorama/GP questions

- Being in different versions of Panorama (9.0.4) and PaloAlto (8.1.13), is it possible to deploy GlobalProtect clients? It does not work and I wanted to confirm this information- Is it possible to publish the linux version in the global protect portal? In the panorama these versions appear but not in the nodes?

BigPalo by • L4 Transporter
  • 3587 Views
  • 4 replies
  • 0 Likes

GlobalProtect Windows Client Persistent Breaks

Hi!We have on ongoing issue with Windows users trying to use the Globalprotect client (up to 5.0.3 now) resulting in up to 30% of the clients persistently breaking with a driver issue[0] which has gone on long enough that we're considering using another VPN gateway. Yes it's been raised (nearly a year ago now).Some questions :-a) Are others seei...

Does changing GlobalProtect VPN to Always On require reinstalling?

I have about a hundred users remote but they don't always need to VPN. However depending on how long WFH goes, I may need them to VPN for things like WSUS windows updates.Rather than assume everyone will follow instructions to connect to VPN (I still will), is there a way to force their connection to always connect, even if our current setup req...

Change Global Protect Config when users are connected

Hi Guys, We have global protect deployed. Portal and Gateway are the same firewall. Now if I do any changes on the Gateway, are those changes immediately effective for the connected users as well?Is there any "profile" that is being pushed to clients/GP agent and if yes, when is it pushed? Are the changes immediately synced? Thanks!

Globalprotect: gateways or satellites?

I'd like to setup a GP environment with a single portal, but two different locations (gateways?) where clients can connect. The documentation talks of gateways and satellites. I'm uncertain of the differences and when you would choose one or the other.Can someone clarify? Thanks.

Global Protect fails after some time

GlobalProtect fails mid way after connecting, remote sessions are opened and then suddenly everything stops working. On checking route table though it seems routes get removed. We have tried installing latest version global protect version 5.0 or 5.1. Host system is Windows 10 Home edition

raji_toor by • L4 Transporter
  • 2535 Views
  • 1 replies
  • 0 Likes

Ipsec proxy id has exceded

We are getting error when configured ipsec tunnel and the error is that "number of entry has exceeded" in proxy id.PA-5220OS-9.0.5 For your information please find attached screenshot.

proxyid1.png

Missing Zone Assignment

I have an issue where traffic coming in one zone is not being forwarded to the right zone. It seems the destination zone is not being assigned right when the session is setup. It seems to be matching the predefined intrazone policy trust-trust. Has anyone seen this before? 10.46.36.11 should be part of a zone called KNAPP, but it is not assi...

eridavis by • L1 Bithead
  • 2970 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect Connect to one of two data centers

My customer has two data centers with GP access.What is the best way to make this a redundant setup and have the GP client prefer to access the closed DC and fail-over to the other DC, in case the preferred DC becomes unavailable? Thank you for your time.

CHKlomp by • L2 Linker
  • 3766 Views
  • 1 replies
  • 0 Likes

Experience with GlobalProtect during Corona pandemic time

I would like to share issues with GlobalProtect, and what was done to fix it. QoS with loopback interfaceDue to high network load on the Internet line, we wanted to priorize (or limit) some traffic. It took several hours (testing, reading documents, having a PA supporter analyzing the issue, ...) until the root cause was identified. Applying QoS...

Designing Networks - Access Denied

Hi community, I'm wondering if it is possible to gain access to the below live community link or is this just for Palo Alto Networks employees? https://live.paloaltonetworks.com/t5/Internal-Knowledge-Base/Designing-Networks-with-Palo-Alto-Networks-Firewalls/ta-p/60868

Rasmgr GlobalProtect

Hi, We are SNMP monitoring the number of users connected by GlobalProtect Gateway. Sometimes we see how the graph goes to 0 and recover the value some minutes later. No issues were reported by users connected by SSL-VPN. So we are investigating if this is a issue about SNMP, GP service, etc...Going to snmp.log we dont see anything about problems...

Captura1snmp.JPG
Captura2snmp.JPG
BigPalo by • L4 Transporter
  • 3892 Views
  • 1 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks