Random UDP 137 to Public IP's after connecting global protect

After installing and connecting to Global Protect, FW policy logs are showing large amounts of UDP 137 getting blocking from Global Protect clients going to many random Public IP's.  Any idea what would cause this?  Public IP's have been MS, AWS, Goo

Issuing DHCP IPs for GlobalProtect users

Hello Guys,

As the title suggests is it possible to issue DHCP IPs for GlobalProtect users? We are expecting to issue GP IP addresses from the Active Directory. Is this scenario possible?

Tightening cipher suites breaks Windows 7 Global protect

Hi folks.

I have recently, as I'm sure a lot of us have, attempted to tighten security on my global protect portal.

I ran an SSL labs scan on it, and it came back with a B result because of some older cipher suites still being in use - so I made some

Split tunneling based on the domain is not working.

Split tunneling based on the domain is not working. We need to monitor our user's web traffic while they are on roaming. While users need to connect GlobalProtect and Cisco Any connects simultaneously, some traffic should go via Cisco Any connects an

HIP anti-virus configurations

Hi folks.

I've recently upgraded my firewalls and added the Global protect license, and I need a bit of insight into HIP configurations.

We recently bought out a second company which primarily uses BYOD devices. I'm a bit wary of adding them into VPN

GlobalProtect with Xauth for iPhone and Android

We have setup GlobalProtect Portal and Gateway working perfectly with SAML auth on MacBook Pro and Windows laptop.  

The only issue is, GlobalProtect Mobile app is not available in our app stores.  So I'm looking for setting up IPSEC Xauth on PAN so

tcp session dropping after 5 minutes

For the most part, Globalprotect is working fine. However, we have one web based app where users are reporting session disconnect errors after being idle for 5 minutes. When connecting to the corporate network rather than via GP, these users dont see

Global Protect Portal and weak cipher sets

Has anyone had success getting past a B on ssllabs for the globalprotect web portal.

i have created the below ssl profile and bound it to the global protect portal. even though enc-algo-aes-128-cbc and
enc-algo-aes-128-gcm are set to know, they still

GP SSO not working until relogin

After installation, globalprotect SSO not working until user logs out and re-logins to windows. 

I don't user kerberos authentication nor client certificates. 

So, I want globalprotect to connect to the portal without asking credentials immediately aft

SSL VPN event logging...

Does the Global Protect functionality produce logs that can be then forwarded to a remote syslog server?

Ingested logs in Microsoft Sentinel

Hi I am using Sentinel connector to process Palo Alto logs in Azure Sentinel. I am willing to find session duration to figure out excessively long sessions and excessive download workloads. First I need a differencing key and value to filter only VPN

GlobalProtect disconnect when remote machine display turns off

Hello,

I am experiencing disconnects from a vendor GlobalProtect VPN on a remote machine when I close local RDP sessions to the remote machine. This issue is preventing automated jobs from running properly unless someone is RDPed into the machine. I

Global Protect SCEP Certificate Username Format

We have SCEP configured and working with our internal PKI.  The connection works, except the user certificates get assigned to username%40domain.com instead of username@domain.com.

The Variable is set to CN=$USERNAME.  It seems like its getting conve