Exclude Video Traffic - Global Protect

Hi there,

We've setup our global protect to exclude all video traffic, using this guide: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways/exclude-video-traff

Global Protect HIP Policies

I would like to configure the HIP Policies which will match the Domain name of Windows Clients, if VPN connections do  not match the HIP policy then VPN Connection should get disconnect with the notification.

Please help me how can we achieve this?

I got an error while uninstalling GlobalProtect

hi, all 

I had a working version of the 64 bit Windows version of GlobalProtect installed on my secondary hard drive on my Windows 10 laptop. My hard drive completely failed recently, disappearing from Windows. GlobalProtect still showed up in the Ad

GlobalProtect upgrades & issues on DHCP option 43 code

Hello All,

Since last year, we are using GlobalProtect 5.0.4 along with DHCP options 43 to detect the Internal GP GW FQDN. The GP client then connects to the branch office GP GW and pushes the User-ID - as it should.

Since I updated our main PA 5520

Local Printing Non-Split Tunnel

Does any know if it possible to allow access to local network printing when you have Global Protect setup to route everything over the tunnel ("No direct access to local network" option enabled).  I've been looking at the Exclusion section and see op

certificate format from CA to clients and GP

Hello Team

Our GP is running with users authenticating via AD account

Now we are rolling out Machine certificate via Group Policy from our Microsoft CA server to all the Domain clients

and then the goal is to enable certificate check in addition to A

Documentation on Global Protect

Hello,

I'm looking for documentation about Global Protect. The default help pages only summarize the menu options in the gui. Typically they contain no explanation about its context or purpose.

Examples of things I really can't intuitively find about

Global Protect Logs in CEF Format

Hi Everyone,

I need to send Global Protect logs to Arcsight connector in CEF format.

looking through all documentations of CEF configuration Guide that are available, there is nothing mentioned about Global Protect logs and how to convert them to CEF f

GlobalProtect Mixed Gateway Always-On

Hi All,

As per this article (https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-quick-configs/mixed-internal-and-external-gateway-configuration) if I set my portal to User Logon (Always-On), my internal gateway will

Clientless VPN and HTTP Redirects

Hi 

I am attempting to use the Clientless VPN feature to give access to an internal web proxy server but have an issue where the Palo Alto is not rewriting URL's from a HTTP 301 Redirect.  

We use inginx/vouch as the proxy server to provide single sig

MAC Client with SAML fails for any version newer than 4.0.8

Hello. We run Global Protect VPN on a Palo 850 with SAML from OKTA and certificates from VMWare Airwatch. For any version of GP Client on the MAC newer than 4.0.8 the login fails. It does not prompt to select the certificate or for username and passw