This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

External DNS resolution + Globalprotect 5.2.4

We had Paloalto Globalprotect VPN version 5.0.9 on our environment. We recently upgraded our VPN client to Globalprotect version 5.2.4. Right after then I see issue in resolving external dns as shown below. After connecting to globalprotect VPN, When I try to do nslookup for any external website, resolution happens using internal dns server with...

BCyril by • L0 Member
  • 4831 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect Client OS Support

I'm looking for information on OS versions supported with GlobalProtect. I found this What OS Versions are Supported with GlobalProtect, which references the Palo Alto Networks Compatibility Matrix. However, I cannot find OS versions (Windows and MacOS) supported listed anywhere. I also checked the relase notes for the version we are running (5....

User management with Client certificates not working

Hello experts, We are trying to authenticate users connecting to GP via client certs, idea is to revoke client certs and thus prevent users from connecting to GP. Test user is still able to connect after certification has been revoked. Due to some reasons, OCSP has been disabled on the gateway, CRL does not contain revocation status, only delta ...

ksoni by • L1 Bithead
  • 2486 Views
  • 1 replies
  • 0 Likes

GP assigning static IPs to clients

Trying to understand why GP is assigning static IPs to GP clients. We are running GP 5.2.5 and the clients are getting assigned with static IPs, they are able to connect fine without any problem for now but one of the employee when she is working remotely had an issue with GP not having gateway address in there. I was able to get her going by pu...

Akhil_B by • L2 Linker
  • 6485 Views
  • 6 replies
  • 0 Likes

Global Protect 5.2.5 and 5.2.5 Hotfix - Allow Transparent upgrade doesn't work - what a mess.

5.2.5 has a nasty bug in which has affected a few hundred remote worker staff as we rolled it out.. Problem 1 - Hotfix now availableThe IP6 and IP4 conflict for DNS resolution when sending AAAA and A requests Problem 2 - Hotfix is seen as older version and will not auto update userswe then see the Hotfix is released to fix this issue, howev...

GlobalProtect Unstable Connection

PA-OS version: 7.1.7GlobalProtect Client version : 5.2.5I have a strange connection problem when I login GP client or open the Portal website. It noticed that I can't connect to the gateway.I test it that the 443 port has no response. It was unstable and intermittent.I don't know if my setting for GlobalProtect is correct or there is some bugs o...

Resolved! Using corporate wildcard certificate for Global Protect

To get up and running with GP I set things up with a locally generated a root cert on the PAN and then generated a server cert tied to the root cert. The server certificate used the IP address of the outside interface as the Common Name. Then I created an SSL profile which pointed to the server certificate. Everything works well although it has...

Global Protect Client IP Range not able to get to internal resources

Hi All,I recently configured an HA pair of 3220s for Global Protect. I have the firewalls handing out IPs from the 192.168.124.0/22 network. The clients can connect and get the correct IPs but are not able to reach internal resources. This same IP range had been setup on a pair of 5250s and I believe I had everything setup for this to work on th...

Global Protect - Internal Detect - WIFI/LAN

hello I am testing our rollout of mobile user vpn with pre-logon and always oncurrently we are on-prem with on-demand so its complete change in user experience but with one of out test users we found today when they are at home using they are using a device that displays company wifi so they connect to this and they are detected as internal whic...

Globalprotect Azure MFA in PA-220

Hello all, I'm just new here and would like to know if Azure MFA will work in PA-220 firewall or is there any restrictions with the said firewall? We are looking to provide solution to enable Azure MFA when using Globalprotect on a PA-220 firewall. Cheers,Mark

mrosales by • L0 Member
  • 2310 Views
  • 1 replies
  • 0 Likes

easiest way to move users to 2nd gateway for maintenance on 1st

We have an Azure implementation of Palo Alto/GlobalProtect.We use an Azure LoadBalancer point to 2 Palo Alto firewalls for GP portal connectivity.Then based on the received config we send the user to the direct interface address of one of the 2 firewalls for gateway connectivity.No HA, no failover. What would be the easiest way to have users con...

  • 1683 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks