Is there anyway that I can force a user to a new IP? I tried logging them out, refreshing the connection, logout button in the gui. I cannot find a way to do this, any ideas?
It seems like 5.2.7 and later GP agents no longer allow the Decline or Accept terms of use at the welcome page. This feature was available in 5.2.6. Anyone know how to enable this feature again in the newer agent releases?
Does anyone know what specific requirements cause the message "The network connection is unreliable and GlobalProtect reconnected using an alternate method. You may experience slowness when accessing the internet or business" to appear? Does GlobalProtect sense that the internet speed is below a certain threshold, etc? This is the same error tha...
Each individual 3220 is licensed for 1024 GP sessions I believe. So if you have a pair in active-active HA does that mean you could have 2048 sessions?
Anyone else come across this? Anyone using ECDSA certs for their GlobalProtect Portal or Gateways? Have you tried non-Windows/MacOS clients? Configuring GlobalProtect Gateways to use ECDSA certs instead of RSA certs breaks everything except Windows, MacOS, and mobile agents. As the SSL cert industry seems to be heading toward deprecating RSA c...
I have several clients that their Global protect (5.2.9) does nothing when they click the connect button. This behavior began with the retirement of Sophos AV. Reinstalling Sophos makes it work again however. Our organization is in the process of retiring Sophos for another AV product. This only affects some machines, most continue to work after...
Hi, I am facing the issue with Pan GP where I get an error Gateway Fake: Could not connect to the GlobalProtect gateway. Please contact your IT administrator.I tried to remove the certificate and also reinstall it multiple times and delete the Palo alto network file also and re-install the Pan GP but no luck. Uninstall all applications but no so...
Whle are using Third party device for SD WAN and all ISP terminated on this device then how I can configure global protect on PA
We want to enforce users to connect GP when they are outside of the network. But when they use their same machine in internet network, this option should get disabled.Can I solve this problem using internal host detection (internal GP gateway) ? If yes , there should not be ip-user-mapping by GP in internal network .
We have a server that runs some automated processes. These processes requires that Global Protect be connected. When I RDP into the server and then connect the VPN on the server, the RDP session is temporarily disconnected. When it reconnects the VPN is no longer connected. I can't seem to keep both connections at once.
Greeting All.JAMF Cloud did an upgrade this morning. This update caused the jamf client binary to be updated on my computers.After the jamf client upgrade GlobalProtect no longer shows JAMF (Casper) in the hip report.Tested GP version 5.2.5 & 6.Has anyone else experienced this issue?
I have a customer who is trying to deploy GP to new managed iPads. He doesn't want the users to have to configure anything. They want the app to already have all the available GWs and the rest of the config. They want to use MS Intune to push this config out. Is this possible? Has anyone ever done it? Would it be possible/better to pre-configure...
Hi Everyone, I need your help as I'm facing a very strange issue with GlobalProtect, the VPN used in my company.When I'm working from home I switch on my PC which is already connected to an ethernet cable: GlobalProtect connects almost immediately (usually to Europe Primary) and I'm able to access my company network drives, folders and remote de...
Hey guys, Been getting this error on some users machine lately, reboot of modem fixes it. Anyone know if it's caused by a recent Windows update? Thanks
I want to set up SCEP enrollment on the firewalls so I don't have to manually update each device cert every year. Ideally I don't want to run my own Certificate management server internally. Can anyone recommend a PKI CA that supports SCEP directly for managing and issuing certificates, I have had a good look round, and I seem to keep being st...
BPry
on:
Rollout Strategy: GlobalProtect Disconnect Comments + 12-Hour Auto-Reconnect
