HIP Data Not Being Collected

Hi!

An exciting start to the day - a security policy with a HIP profile ("compliant" - basically running an approved os) that previously worked fine, stopped working for a random selection of people and rapidly became less random and more universal.

Global protect portal - No login enforced

https://publicIP/global-protect/getsoftwarepage.esp 

This portal is available now publicly even without login. Anyone can access the portal without login and download the client.

Is it possible to restrict this page to login users only.

Global Protect disconnects several times a day

Our VPN users are complaining that after being connected for over 1 hour they get disconnected by global protect.  They have to close global protect and reopen to connect back.  We have remote customer service agents that get disconnected up to 4 to

User password change

Is it possible for PA local users to change their password themselves. Global protect VPN users needs to have option to change their password, rather than admin setting the password.

VPN portal migration to Cloud

Hi Team

We have a GP portal vpn.example.com which is hosted on a physical NGFW where we use SAML for authentication.

Now we want to move it to cloud, hence we have to generate a new SAML  for this portal IP with the FQDN vpn.example.com.

We want to use

Query with generating Wild card certificate for GP Portals/Gateway on the firewall for requesting CSR with GoDaddy CA

Hi All,

We are having 3 ISP's and one GP Portal/Gateway pair configured on each of the ISP interface total of 3 GP Portal/Gateway on the single firewall all are accessed by FQDN name

We had bought 3 domain names from Go Daddy for all of our 3 ISP IP'

GP_VPN Disconnection Issue

Hi All,

We are having two ISP connections and configured an GP Portal/Gateway on each ISP connections(Primary Portal/GW on  ISP 1 and Secondary GP Portal/GW on ISP 2).

On firewall the ISP 1 is configured as default route and ISP 2 is configured as ba

Global Protect at a IPsec S2S branch office

Hi all

We have a load of small branch offices that terminate at our azure Palo Alto gateway over an IPsec tunnel (via a Draytek router). This all works and allows printing & RDP to onprem services. We also have the Global Protect gateway on the same P

Exclude Zoom from GlobalProtect

Hello,

I'm working on excluding Zoom from GlobalProtect.  I came across this article

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPDSCA4&lang=en_US%E2%80%A9

For windows, there is an error, instead of excluding %AppData%\R

Crowd strike installed not installed list using palo alto HIP object

Hi Teams & Friends,

                                   Hope you're good and safe !

                                    We have configured GP VPN we have license for configuring HIP objects it was working as expected one of our new requirement was to kn

global protect and windows 10

Hi Guys, 

Having issues with the Windows 10 2004 and Global protect.

Users on this version of windows seem to have intermittent disconnection from GP.

They are currently on GP ver 5.2.7 but still having problems.

Has anybody else seen this issue?

Palo Alto GlobalProtect - Detailed HIP logs not seen in the HIP match logs

GlobalProtect - Limited SANS in a certificate

We need to setup a new GlobalProtect Gateway but the current clients certificates are not using a wildcard certificate but a certificate with SANS entries for the gateways.

It seems I can only generate a new CSR that is limited to four (4) SAN entrie