Hi, When and how to you add the new macos BigSure to your HIP Object selection? thx
So I have added 2 new isp's with dedicated connections for gp.With 200 plus users and they aren't savy, how does one push the new ip's to the end point so it's in their list?I did not find a the gp ip portal list in the registry.Nor some other file that gp uses so where is it storing the ip list it displays to end users?Thankpa3220, gp 5.1.3
Hi Folks,A year or so ago we tried to upgrade our Global Protect 5.0.3 to the recent prefered version with the result that many of our users get the chineese / asian letters in username BUG after the Upgrade.Now we tried again with 5.1.6 and instead of Chineese Letters we get four QuestionsMarks for the Username after the Update. I realy get ann...
I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained. On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, and also certificate authority), then I cut a cert called gp-cert (issued by intermediateca, non c...
hi friends, I am trying to understand, which is the best among the below 2 IPSec encryptions? 1. "aes 128-cbc"2. "aes 256 -gcm"i am looking for opinions based on security and reliability. Thanks !!
Hi, We have a number of GP users operating clients running 4.07 and some using version 5.x. There is an odd (Annoying) issue that those running the later versions of GP have noticed and its to do with the pop-up placement of the Welcome Screen. In 4.07 the Welcome screen appears after the authentication has been successful with the GP gateway....
We are trying to deploy pre-logon, we have security policies around pre-logon users, and then security policies for actual users once they authenticate. Basically, an initial pre-logon rule that allows access to domain controllers, etc., followed by a pre-logon deny all rule, followed by rules for users that have fully authenticated to GP. All...
Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to repair the app (No UAC prompt in Zoom). The issue is after what looks like a successful upgrade th...
Hello, I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed" PAN-OS 9.0.7GP Agent : 5.0.8 Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?
Hello. Is there a way to install the Global Protect configuration during the installation? Our PC imaging process installs GP and also adds the portal address but the configuration is not there until a user logs into the PC and then signs into Global Protect. We are trying to have a remote user be able to sign into their newly imaged device ...
I am having experience in the global protect agent login window when the user starts logging from the machine. Chinese characters are populating automatically in the GP agent username logging field window, and users have to clear the character to enter their username logging into GP.And this issue came after the upgrade of the Palo Alto global p...
Hi All, I have recently configured a clientless vpn for a customer but the solution needs client certificates for the users to log in with a browser. Is there a way I can make this an authentication only solution with no client certificate requirement? The GlobalProtect configuration is configured and working for staff members using PreLogon suc...
Hi, Have some users after upgrading to GP 5.1.6 that are getting this error. Has anyone come across this? I've seen it with other DLLs before, but not this specific one. GP seems to be working fine, despite the error The code execution cannot proceed because PsvCtrl.dll was not found. Reinstalling the program may fix this problem Trying to d...
Hi,My name is Anthony, and we are ISP from Montreal, Canada.It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is situated in Quebec, Canada .This is problematic for us, in times of Covid19, cause many of our cus...
We have configured the Azure MFA NPS as a first factor of authentication. I am getting the OTP but in the GP client I am not getting any thing to put that otp.We have configured Azure MFA NPS extension as a radius server and first factor of authentication.
BPry
on:
Global protect with LOOPBACK Interface
reaper
on:
GlobalProtect Mac Client ENDLESS POPUPS that TAKE FOCUS from other apps
BPry
on:
Semi-Disable Global Protect on Mac
