We're encountering a GlobalProtect error stating 'Certificate is not within its validity period,' despite this being a newly configured Palo Alto setu

We are currently setting up a PA-VM Firewall under the Alibaba Cloud Platform. However, we are encountering an issue with GlobalProtect. The client keeps showing an error stating that the certificate is not within its validity period, even though the

Globalprotect end users are receiving default route (0.0.0.0) but it is not configured to do that

GlobalProtect localDb auth change password

Hi,

I want to configure global protect to authenticate with localDB users. My doubt is if its possible to change the password for the different users when they connect with GP the first time. We would need local users accessing the GP to be able to m

Default route using split by domains

I need to add this domain "*microsoft.com" in order to go into the tunnel but then i add the domain the GP config adds 0.0.0.0/0 route into the tunnel.

Is there any way to avoid/deleted default route when you add any domain in split tunneling?

HIP Check reports fail to send to internal gateway following internal gateway certificate change or patching of firewall

Hi all, we've recently had a couple of issues which have caused us to investigate client Global Protect connectivity issues.

The first was off the back of the recent security patching of our firewall HA pair.

The second was after replacing the intern

Cursor - The AI Code Editor

Hi,
I'm trying to use cursor for work at my company, but it doesn't seem to be supported in E-DLP yet.
When will you support it?

GlobalProtect Pre-Logon Prompting for User Certificate

We have GlobalProtect Pre-Logon working with machine certificates however once the user logs into their laptop they are also prompted with thier User Certificate each time. There internal CA does issue machine and user certificates. Is there a way to

GlobalProtect - reject logon attempts for GP versions less than X

We get a lot of drive by logon attempts to GP that I'd like to reject at the start and I've noticed a good number lately are showing a Windows client specified with version 6.2.1.  Is there a way to reject GP logon attempts such that 6.3 or greater i

Prefered GlobalProtect releases

I have two problems.

1. I have trouble checking the preferred globalprotect releases.

Similar questions have been asked before (for example: https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-preferred-release/m-p/462965#M2426

Remote Access VPN on PPPOE dynamic ip

Hi,

Has anybody tried configuring GlobalProtect VPN on PPPOE public ip? 

It is dynamic ip from ISP, should i get the static ip from ISP or is there any way to configure GP VPN on dynamic ip.?

GP 6.3.3 Not uninstalling old versions

We have had multiple Windows users where the installation of 6.3.3 does not uninstall the old GP version.  This causes an upgrade loop for the users.  This is both for Transparent and manual installations.  The only fix we have identified is to compl

Global protect gateway is reusing cached HIP reports by default if no HIP report is received at login

Dear all,

We experienced a strange issue recently where a client of ours reported a connectivity issue (not related to HIP, but related to a firewall rule). When we tried to find the client in the recent HIP logs we noticed its last HIP report was