Azure SAML authentication not Happened via GP Agent

Hi All,

We have implemented the SAML two-factor authentication for Global Protect users.

GlobalProtect IOS stuck

Good day,

After updating to10.2.1 and 6.0.2 GlobalProtect client I could not connect to VPN.

The problem was occurred for one endpoint. So I used the second one to connect and update the client.

Also the DNS(for split tunnel) was not work. I had to ma

PA-3020 AutoCommit fails - commit force fails

Hey all!

I have a problem with my second passive PA-3020. (7.1.7)

We had a loss of power so the firewall was shutdown hard.

When it's booting now, the autocommit fails.

When I do a commit force, it says: "Threat database handler failed".

Then I stumbled o

UserId Mapping Issue - Regex Issue

We have a user id mapping coming initially as useraname@company.com as we are moving away to a different authentication, the username is coming as company\username and we were inserting default domain as the domain of the company.

we were getting u

ZTP stuck at Connected no

I have a pair of 3410s that I am trying to onboard through ZTP. I have gone through the steps of setting up a cert on the PA and registering the firewalls. However the device state in panorama shows disconnected. I can confirm that the firewalls can

VPN Traffic to Internet

Hi Team,

We have a requirement. Our PA Firewall has internet connectivity and VPN set to one of the peer end Forcepoint device.

VPN is up and running. Traffic from Forcepoint LAN to MPLS connected to PA is all working over the VPN.

Now the requiremen

NTP Best practices

Hello,

I have a PA firewall without panorama, at present I have public ntp servers in sync with pool.ntp.org which are default from PA. Is this good to use public NTP server or local NTP server ? Please let me know the best practices on this.

High Availability on ESXi for Panorama VM

dns-signature cloud service connection refused.

Greetings:

I am seeing in the System Log the following message "dns-signature cloud service connection refused"  Checking the traffic logs the management IP address is not being blocked.  Where do I look to resolve this error message?   Thank you.

API to tag shared policy

We have few shared policy and need to tag and disable them . Please help me with API deatails

Session Expire Time one month

The session expiration time is more than a month apart.

I'm using the 10.1.8 version and my search says it's a firmware bug.

However, the same symptoms appear in version 10.2.1.

Is there a solution in relation to it?

Commit Error

Hello.

After adding the allowed IP band, I pressed Save, but it is failing.