server certificate is invalid on chromebooks and phones

So for about the last month (just before xmas) we seem to be having certificate errors for our wildcard cert. Its a wildcard purchased from instantSSL. (sectigo) when using it with global protect client.

It works fine on windows machines. Just seems

Morphisec Unified threat prevention not recognized by Global Protect HIP

Hi Team,

We have noticed an issue that, in Host Information logs on Global Protect the GP Agent is not fetching the "Morphisec Unified threat prevention" Anti-Malware software that was installed on the Client Machine. 

Herewith, i have listed the Sof

Connect Before Logon - Network Sign Option Not Available

We are stuck with Network Sign option not getting visible on Windows logon after installing GP Client ver 5.2.5.

We expected the GP ver 5.2.x and above to create registry automatically as mentioned in following URL. Unfortunately , they are not gettin

split DNS

Hello

We need to test MS-Teams. hence I did a few tests with split DNS. The published manuals (e.g. https://live.paloaltonetworks.com/t5/general-articles/globalprotect-optimizing-office-365-traffic/ta-p/319669) are fine, as long as the VPN gateway is

GP connect before logon .

Has anyone configured connect before logon .Would need steps to configure this .I have a few queries as well .Do we need pre-logon user agent config for this or no ? The registry values found in this document are not exact to what i see on windows .A

GlobalProtect with Azure MFA setup

Has anyone had any luck setting up MFA on the Palo Alto with Global Protect with Microsoft Azure MFA (Hybrid) I tried opening a ticket with the support team and they said they had no clue how to setup but could support it if broken and told me a "Sal

Multiple gateways with multiple preferred IPs

We have Global Protect configured at site A - HQ, and we use preferred IP assignment. All good here.

We’re deploying Global Protect at site B. We intend to use both gateways for HA. Site A and B are connected.

My question is - can we use preferred IP

GlobalProtect machine pre-logon coverted into a user connection without user certificate in device

Hi there, we are facing a weird situation with GlobalProtect pre-logon connections.

• We have some laptops with machine certificate only (they do not have user certificates deployed).
• We want them to connect using this machine certificate, as "pre-logon

DNS logging with globalprotect

Hi,

Wondered what people's experience/advise is on the following. We have palo alto VM series in azure which we are using globalprotect on. At the moment I am NATing the globalprotect VLAN to the IP address of the firewall, but in doing this I am fin

Internal Host Detection Issue

Hi there,

I have a question on the correct use of internal host detection and internal/external gateway config. The behaviour I want to achieve is when a client is internal to the LAN GlobalProtect will detect this and not bring up the tunnel and pas

Help Locking Down Global Protect Access

I'm switching our user over to the Always On VPN via the Portal App Config that auto connects the vpn and requires it for network access. The issue is I want to prevent my users from connecting via  personal PC. I've set the Client Authentication to

Global Protect client showing Gateway name instead of Best Available

In my companies environment we have about 12 Gateways. Most of our machines have GP 5.0.8-4 installed. 

With no preferred gateway selected, I've seen a few cases where the GP client shows the gateway it's connected to instead of Best Available. From w

Remote Access through IPSEC?

Hello,

I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with.

In case this isn

Which release of Global protect support macOS Big Su

Thanks,

E

GlobalProtect with Windows 7 VirtualBox VM setup

One of my clients has recently switched their VPN setup from Checkpoint over to GlobalProtect, and it's completely broken our Virtualbox setup. Our PCs run Windows 10 natively, and then we use VirtualBox to run Windows 7 VMs to support some legacy so