This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Share office space + Global Protect

Hi all, has anyone had any issues with GP clients in share office areas? We have recently added a few remote users that work out of a shared space. Very weird, GP connects fine, I can ping internal machines and resolve names no problems. RDP works. We have a few small internal web servers hosting some browser based apps. Unable to connect to htt...

Dekkar by • L1 Bithead
  • 2125 Views
  • 2 replies
  • 0 Likes

Global protect multiple authentication methods on same portal

We currently use GlobalProtect with LDAP + machine cert authentication on our production firewalls (managed by Strata Cloud Manager). We’ve tested SAML auth via Azure AD on a non-production firewall using Cloud Identity Manager and it works fine. Now we’d like to test it on production without forcing it as the default profile (to avoid impacting...

ParisVcr by • L0 Member
  • 793 Views
  • 1 replies
  • 0 Likes

No internet access after connecting to Global Protect client

First, I'm just a simple user of a Global Protect client since this is required by our company. I'm not proficient with technical terms and stuff. Issue: I successfully connected to the gateway however, I have no internet connection. No sites can be accessed. Troubleshooting I have done so far:1. Reinstalling the client and restarting my device....

GP Split Tunnel in Windows 11 Issue

Hardware: Lenovo x1 Gen12GP Version: 6.2.7I am using windows 11 24h2, currently when I connected PaloAlto GlobalProtect and access the URL by split tunnel. The connectivity will get reset.Example, Accessing the teams.microsoft.com by edge or chrome, it will show Connection Reset. If I disconnect the GlobalProtect client, it will resume normal.Is...

Global Protect Authentication Questions

Hi, I'm going to setup Global Protect in our environment but have some questions before I configure it. 1. Can both a client certificate & SAML be used in conjunction for authentication? If not, would an internal RADIUS server make the most sense for secondary authentication? I want to use the client certificate to control device-ba...

Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications

I am trying to upgrade the GP username/password login to an MFA login. The username/password login is now working correctly. I am using a local database to authenticate users. I followed the instructions https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/authentication/configure-globalprotect-to-facilitate-multi-factor-authe...

Situation with PA-5250s and Global Protect connections

Specific situation we're dealing with, looking to see if anybody else has and has any input. Over the past few years we have worked a Global Protect build and deployment in our org. We opted to use PA-5250s solely on the basis that they documentation claims that model supports 30k GlobalProtect connections (IPsec AND SSL specifically).In our con...

Connection Failed GlobalProtect on a Mac

I am having an issue logging into the VPN on my Apple devices. I can connect to the VPN via the windows laptop, but I cannot on my Apple laptop. I keep receiving this error message on the Macbook Pro "[Error]: Gateway VPN External Gateway: The network connection is unreachable, or the gateway is unresponsive. Check the network connection and rec...

Resolved! GP User-logon (Always On) doesn't connect

We are preparing configuration of GP for Windows based terminals which need to connect automatically when Windows AutoLogon happens. But in most cases GP remains disconnected because it tries to connect too early when network isn't fully connected yet. If I click on Connect it connects immediately. But of course this isn't an option, Any ideas h...

santonic by • L6 Presenter
  • 1882 Views
  • 2 replies
  • 0 Likes

Global Protect fails to connect Apple iOS

Hi all, We're encountering an issue when trying to connect to our VPN using the GlobalProtect app on iOS. After entering the portal address, the app redirects to Azure AD for authentication. Once credentials are entered, we receive the following error: Connection FailedGlobalProtect failed to connect to the login server. Contact your IT help ...

IMG_3316.jpg

Resolved! User-id with GP client certificate authentication

Hi,I have questions regarding user-id operation with GP client certificate authentication only for iOS/Android devices. Current state:We have GlobalProtect portal and external gateway on the same firewall with SAML authentication for mobile devices - iOS (on-demand, but enforcement to use VPN is achieved with proxy file) and Chrombook (always-on...

Global Protect Dual ISP

Hello i have configuration that need to be revise since there some ISP that can't provide asymmetric connection source. the rest Inbound NAT already clear using PBF but only Global Protect that still can't be enforce symmetric. Here my example configuration in firewall : ISP A : 10.10.10.2/28 ( Zone : Untrust ) GW ISP A : 10.10.10.1 VPN ISP A I...

PreviousConfig.jpg
NYanico by • L1 Bithead
  • 1438 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect brute force config.

Good day all, I was reading a few articles bout changing the config for Brute Force: Object -> Vulnerability Protection --> Exceptions. I actually have two. One called Vulnerability Protections Profile-Strict and the other default. I check both of them and I do not see the 40017 that are mentioned. So I thought it was as easy as jus...

WGranada_0-1754315139237.png

GlobalProtect CLI error: cannot connect to local gpd service (SAML, OpenSUSE/Ubuntu)

We want to test GlobalProtect (PanGPLinux-6.2.8-c2) on an unsupported version of OpenSUSE 15.5 CLI. During installation and when attempting to connect, we encounter the error:“cannot connect to local gpd service”,even though the service is running and reported as active. Additionally, we are using SAML for authentication. In the GUI version, ins...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks