This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect, Release Notes, Build Numbers, CVE ?!?!

Can someone explain to me why the GlobalProtect App release notes don't list the CVE's addressed? These are changes made in the app that need to be in the release notes and it seems unnecessary to have to check two different sources for information. The only place CVE's are listed for GlobalProtect seems to be here: https://security.paloalton...

GlobalProtect MFA with external/USB user certificate

We are using LDAP for the username/password authentication and I am now trying to set up our GP Portal to use username/password AND a user certificate for MFA. I've seen some documentation that states that the GP Agent will look at the local user and computer store, but is there a way to have it look at an external device? Also, what informat...

jwill2 by • L1 Bithead
  • 274 Views
  • 3 replies
  • 0 Likes

[SOLVED] GPUDATE /FORCE DOESN'T WORK WITH GLOBAL PROTECT

Hello LiveCommunity Team! I created this post to share my experience regarding an issue involving GlobalProtect users from Prisma Access who attempt to run gpupdate /force to update GPO policies from the DC server, and who encounter the following error:CMD ERROR GPUPDATE /FORCEC:\WINDOWS\system32>gpupdate /force Updating policy...User polic...

DanielSRomero_1-1778369596055.png
DanielSRomero_2-1778369715172.png
DanielSRomero_4-1778370034165.png

Resolved! MacOSX Tahoe 26.4.1 (25E253) / Global Protect 6.3.3: Network is unreachable

Hi, I've been facing an issue after upgrading my mac M3 to Tahoe 26.4.1 (25E253) (two days ago) When trying to connect to my portal/gateway, I always have the same response: Network is unreachable. Since I can browse to google or else, it's not a common/classic network issue. The fact is, even I send a good or wrong user/pass: the resu...

GlobalProtect 6.3.3 + Duo SAML MFA loop after normal Windows login (works only via GP Credential Provider at Windows logon)

Hi everyone, we are currently facing a strange issue with GlobalProtect + Duo MFA and have been able to narrow it down quite a bit. I wanted to check if anyone has already seen this behavior. Environment GlobalProtect Client: 6.3.3-c876 Prisma Access Mobile Users Dataplane Version: 10.2.4 Authentication: SAML via Cisco Duo Cisco Duo federated t...

Global Protect getting stuck on connecting loop

We are facing an issue sometimes the global protect gets stuck on connecting loop while we connect to the global protect it redirects to the default browser for authentication and shows authentication successfull but global protect gets stuck on the connecting loop and it does not connect only showing retrieving config from the portal. But somet...

n.bhat by • L0 Member
  • 4314 Views
  • 3 replies
  • 0 Likes

Globalprotect Client 6.2.7 disconnects multiple times

We are encountering several users, where Globalprotect disconnects the GP-tunnel on Windows 11. In PanGPS.log I found the messages: CheckPanGpAgentThread: PanGPA process #### exits, ret is 00000057. and GlobalProtect agent terminates unexpectedly. Skip StopThreads(). Has anybody a suggestion, how to get rid of this failure?

halladm by • L0 Member
  • 254 Views
  • 2 replies
  • 0 Likes

Resolved! Enforce GlobalProtect Access Based on Microsoft Intune Compliance Status

Hello Palo Alto Community, One of my customers previously used on-premises Active Directory and has now migrated to Microsoft Entra ID and Microsoft Intune. All endpoints in the environment are Windows 11 computers. They have a requirement to allow access to sensitive internal destinations through GlobalProtect only from Intune-compliant d...

Global Protect count current users not match statistics

Hey thereThe counts are not matching between: >show global-protect-gateway summary detail GlobalProtect Gateway: connect-gtw:Current Users: 675Previous Users: 4520current-user : 675 Also with MIB OID .1.3.6.1.4.1.25461.2.1.2.5.1.3.0 panGPGWUtilizationActive Tunnels shows 675 But >show user ip-user-mapping all type GPTotal: 225 usersi...

kuschg by • L0 Member
  • 147 Views
  • 0 replies
  • 0 Likes

GlobalProtect Client Quadlet

I work on Linux systems, specifically Bluefin which is based on Fedora SilverBlue.My employer (Vanderbilt University) installed GlobalProtect servers for VPN.It is difficult to install an RPM or DEB package.Additionally, I use various versions which may not be well supported by the official packages.To that end I made a container image and insta...

SAML cookies and global protect cookies

Hi, If I am using SAML authentication on my portal and gateway what is the best practice around Authentication cookies override. When using SAML my user will be prompted via the default browser 2 times ones for the portal and ones for the gateway. I read that you can overcome this by generating a cookie on the portal an accept on the gateway i...

GOMEZZZ by • L2 Linker
  • 2607 Views
  • 1 replies
  • 2 Likes

GP Connection Failed - gateway could not verify the server certiticate of the gateway.

Hi All, I have GP setup and working like a dream..... most of the times. however i have a strange issue.. and seems to only affect Azure cloud PCs at the moment, normal users with laptops and desktops can connect no problem. my certs are all valid and signed by an external CA. however on Azure cloud PC's the connections are very intermittent.....

PA_nts by • L4 Transporter
  • 18683 Views
  • 7 replies
  • 1 Likes

failure to connect

I am trying to access the Global protect service but no matter what I do, I cannot connect to the service. I have contacted my univeristy's IT team but they were unable to resolve the issue and stated it may be due to a snapdragon processor on my laptop. Any ideas on how to fix it?

GlobalProtect Gateway behind reverse proxy

Is there a way to put the globalprotect gateway behind a reverse proxy for sslvpn only?I know that technically you can just NAT to the gateway but it is wanted to put the gateway behind a reverse proxy and not use ipsec, only sslvpn.When I try this, the globalprotect app is allowed but the connection fails nonetheless. I assume this is because t...

CLiqr by • L1 Bithead
  • 395 Views
  • 2 replies
  • 0 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks