Is a special license required for performing HIP checks on clients trying to connect with Global Protect to the PAN?
I see the PAN has Premium, Threat Protection, Wildfire and PAN DB URL presently.
I'm using Google as my IDP to authenticate access to Global Protect for the bulk of my users. I have a second gateway/portal that is just local users/groups and I have policies that restrict their access, and I want to mimic that with my main PortalG
...
Hello,
How can I remove global protect and its restrictions?
I was able to remove it, but it gets reinstalled again by itself.
Thanks
We're using these versions (Yes, we need to upgrade, but other priorities at the moment)
PANos 8.1.14
Global Protect client 5.2.1
We're currently usingOn-Demand, which is working. We used this page with the only difference is we're using AD Authenticat
...
Is there a way to restart the Globalprotect module? PC and Mac users on Globalprotect are unaffected, its only on mobile devices.
This suddenly stopped working this morning. I even tried manually setting the DNS in the VPN profile to our internal DN
...
When setting up a portal or gateway there is a place to configure authentication - say with LDAP or other.
What is the relationship between the portal and gateway from the perspective of authentication?
Obviously you'd want users to just log in once.
When I am trying to connect with VPN then its throwing below error and after that a blank popup for login window comes, earlier in the login popup it asks for username and password,
Using PanOS 9.1.10 and GP Client 5.2.8
We have Okta authentication set up and working on our GP portals, but a strange issue was causing failures for quite a while, and we couldn't figure it out even working with Palo Alto tech support for many days.
Hi!
An exciting start to the day - a security policy with a HIP profile ("compliant" - basically running an approved os) that previously worked fine, stopped working for a random selection of people and rapidly became less random and more universal.
...
https://publicIP/global-protect/getsoftwarepage.esp
This portal is available now publicly even without login. Anyone can access the portal without login and download the client.
Is it possible to restrict this page to login users only.
Our VPN users are complaining that after being connected for over 1 hour they get disconnected by global protect. They have to close global protect and reopen to connect back. We have remote customer service agents that get disconnected up to 4 to
...
Is it possible for PA local users to change their password themselves. Global protect VPN users needs to have option to change their password, rather than admin setting the password.
Hi Team
We have a GP portal vpn.example.com which is hosted on a physical NGFW where we use SAML for authentication.
Now we want to move it to cloud, hence we have to generate a new SAML for this portal IP with the FQDN vpn.example.com.
We want to use
...
Hi All,
We are having 3 ISP's and one GP Portal/Gateway pair configured on each of the ISP interface total of 3 GP Portal/Gateway on the single firewall all are accessed by FQDN name
We had bought 3 domain names from Go Daddy for all of our 3 ISP IP'
...
Hello,
We're currently implementing GlobalProtect with SAML Authentification to AzureAD only (no hybrid) based on groups for easier management.
Example :
Groupe1 is given an IP_Pool1 IP with access to subnet1
Groupe2 is given an IP_Pool2 IP with access
...
BPry
on:
Global Protect Client Crash 6.3.3
Raido_Rattameis
reaper
on:
Could not connect Global Protect Service MacOSVentura
BPry
on:
Global Connect icon in the Task Manager Tray not showing as Active
PavelK
on:
GlobalProtect Design Question
