This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

server certificate is invalid on chromebooks and phones

So for about the last month (just before xmas) we seem to be having certificate errors for our wildcard cert. Its a wildcard purchased from instantSSL. (sectigo) when using it with global protect client. It works fine on windows machines. Just seems to be chromebooks and phones. When you go to connect it prints the error "Gateway XXX: The server...

split DNS

Hello We need to test MS-Teams. hence I did a few tests with split DNS. The published manuals (e.g. https://live.paloaltonetworks.com/t5/general-articles/globalprotect-optimizing-office-365-traffic/ta-p/319669) are fine, as long as the VPN gateway is "near". In our case the user is located in South Africa, and the VPN gateway is in northern Euro...

GP connect before logon .

Has anyone configured connect before logon .Would need steps to configure this .I have a few queries as well .Do we need pre-logon user agent config for this or no ? The registry values found in this document are not exact to what i see on windows .Any help is appreciated . I have added this registeryPanGPS.exe -registerplap Rest options are not...

GlobalProtect with Azure MFA setup

Has anyone had any luck setting up MFA on the Palo Alto with Global Protect with Microsoft Azure MFA (Hybrid) I tried opening a ticket with the support team and they said they had no clue how to setup but could support it if broken and told me a "Sales" Engineer would reach out to me sometime that day. That was 4 business days ago. I have been ...

DNS logging with globalprotect

Hi, Wondered what people's experience/advise is on the following. We have palo alto VM series in azure which we are using globalprotect on. At the moment I am NATing the globalprotect VLAN to the IP address of the firewall, but in doing this I am finding that the DNS log traffic from our DCs is limiting in that all of the requests are appearing ...

Internal Host Detection Issue

Hi there, I have a question on the correct use of internal host detection and internal/external gateway config. The behaviour I want to achieve is when a client is internal to the LAN GlobalProtect will detect this and not bring up the tunnel and pass all network traffic transparently out the LAN connection, as if it wasn’t there. When external,...

Help Locking Down Global Protect Access

I'm switching our user over to the Always On VPN via the Portal App Config that auto connects the vpn and requires it for network access. The issue is I want to prevent my users from connecting via personal PC. I've set the Client Authentication to require User Credentials and Certificate. When I delete the certificate that I set up I get the w...

Walt by • L1 Bithead
  • 2590 Views
  • 1 replies
  • 0 Likes

Global Protect client showing Gateway name instead of Best Available

In my companies environment we have about 12 Gateways. Most of our machines have GP 5.0.8-4 installed. With no preferred gateway selected, I've seen a few cases where the GP client shows the gateway it's connected to instead of Best Available. From what I've seen the norm seems to show Best Available and you have to go into the GP client setting...

popeja by • L2 Linker
  • 5202 Views
  • 3 replies
  • 0 Likes

Remote Access through IPSEC?

Hello,I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with.In case this isn't clear.... the WAN interface of the PA220 would service both the remote access vpn and the ipse...

Load balance a clientless application

Hello evrybody, some of our customers make heavy use of the Clientless VPN feature of the GlobalProtect Portal, and one of the most used application this time is the Apache Guacamole remote desktop gateway (https://guacamole.apache.org/). The GP Portal is configured to show the icon of this app and clicking on the app, of course, the remote us...

grenzi by • L3 Networker
  • 8228 Views
  • 5 replies
  • 0 Likes

Unable to install Global Project for Mac for M1 processor

Hi guys, Tried multiple times, best result was the icon showing with a "cancel" sign. Deleted the app, tried to install again and now the icon doesn't show up even though installer finishes correctly. I saw a post it works fine with version 5.2.4 and 5.2.3 but I can't seem to find where to download those specific versions Any help is greatly ap...

avchiva by • L0 Member
  • 3137 Views
  • 1 replies
  • 0 Likes

DNS suffix not applying

Hello, I have deployed a GlobalProtect gateway in an office that uses a different domain than our own. To that end, I have added their dns suffix to the gateway but when I connect onto that gateway, the suffix is never appended. I cannot access their domain resources unless I use FQDN. In the logs, I see the config being sent and it does in...

COlson by • L2 Linker
  • 15060 Views
  • 15 replies
  • 0 Likes

Global Protect VPN disconnects on Windows while active

We are having an issue where Global Protect VPN on Windows 10 is disconnecting after 4 hours while it is still active. We have the inactivity logout set to 4 hours. Our Macs aren't having any issues. The HIP log on both the mac and windows machines shows the check running successfully every hour. We have ruled out sophos, windows defender, a...

Resolved! GlobalProtect HIP Check when connecting to external gateway

I have GlobalProtect portal/gateway configured and working in my environment. External users can connect to the GP portal/gateway and receive network access. I have set up a HIP profile to check for domain joined and AV updated in the last 3 days. What I'd like to do is have the HIP check run during the initial connection to GP portal/gateway, s...

  • 1709 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks