Hi All, A customer recently migrated for 2 x PA-3020 to 2 x PA-460 running PAN OS 10.1.1. Since migrating they are having some odd issues with Global Protect, 90% of the time GP is connecting as SSL, even though IPsec is enabled on the tunnel, and wh...
Hi, I am facing the issue with Pan GP where I get an error Gateway Fake: Could not connect to the GlobalProtect gateway. Please contact your IT administrator.I tried to remove the certificate and also reinstall it multiple times and delete the Palo a...
When matching HIP objects for definitions updated within 30 days a majority of my users failed. I noticed carbon black does not show the data I need under definition version or data. Has anyone else seen this?
Whle are using Third party device for SD WAN and all ISP terminated on this device then how I can configure global protect on PA
We want to enforce users to connect GP when they are outside of the network. But when they use their same machine in internet network, this option should get disabled.Can I solve this problem using internal host detection (internal GP gateway) ? If y...
We recently implemented Duo Multi-Factor Authentication (MFA) and have configured GlobalProtect to use Duo's SSO service (which in turn Duo uses Azure AD for authenticating the user). We are using SAML for authentication, so when the user clicks 'Con...
We have a server that runs some automated processes. These processes requires that Global Protect be connected. When I RDP into the server and then connect the VPN on the server, the RDP session is temporarily disconnected. When it reconnects the VPN...
Greeting All.JAMF Cloud did an upgrade this morning. This update caused the jamf client binary to be updated on my computers.After the jamf client upgrade GlobalProtect no longer shows JAMF (Casper) in the hip report.Tested GP version 5.2.5 & 6.Has a...
I manage many GlobalProtect VPN environments. One inparticular annoys me, in its portal configuration it uses the Palo Alto web browser for SAML authentication. As a result .... because I have used the GP web browser for authentication in the past......
I have a customer who is trying to deploy GP to new managed iPads. He doesn't want the users to have to configure anything. They want the app to already have all the available GWs and the rest of the config. They want to use MS Intune to push this co...
Hi Everyone, I need your help as I'm facing a very strange issue with GlobalProtect, the VPN used in my company.When I'm working from home I switch on my PC which is already connected to an ethernet cable: GlobalProtect connects almost immediately (u...
Hey guys, Been getting this error on some users machine lately, reboot of modem fixes it. Anyone know if it's caused by a recent Windows update? Thanks
Hi Team After upgraded the Global protect from 4.1.9 to 5.1.8. Few of the Gp clients not connected. If I repair the Global protect its working fine. So checked the PANGP event logs and found the below error Tunnel is down due to disconnection.01/28/2...
Hello,To make the next update to GP as easy as possible for users, we would like to see an automatic reconnect. At the moment, the actual upgrade works fine to 5.1.9, but requires manual intervention at the end by clicking on the "connect" button aft...
I want to set up SCEP enrollment on the firewalls so I don't have to manually update each device cert every year. Ideally I don't want to run my own Certificate management server internally. Can anyone recommend a PKI CA that supports SCEP directly f...
on:
GP Licensing with Active-Active 3320 Pair
on:
Global protect
on:
PA-460 GP clientless VPN only allowing max users of 20
on:
Global Protect Upgrade queries
