This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

DNS logging with globalprotect

Hi, Wondered what people's experience/advise is on the following. We have palo alto VM series in azure which we are using globalprotect on. At the moment I am NATing the globalprotect VLAN to the IP address of the firewall, but in doing this I am finding that the DNS log traffic from our DCs is limiting in that all of the requests are appearing ...

Internal Host Detection Issue

Hi there, I have a question on the correct use of internal host detection and internal/external gateway config. The behaviour I want to achieve is when a client is internal to the LAN GlobalProtect will detect this and not bring up the tunnel and pass all network traffic transparently out the LAN connection, as if it wasn’t there. When external,...

Help Locking Down Global Protect Access

I'm switching our user over to the Always On VPN via the Portal App Config that auto connects the vpn and requires it for network access. The issue is I want to prevent my users from connecting via personal PC. I've set the Client Authentication to require User Credentials and Certificate. When I delete the certificate that I set up I get the w...

Walt by • L1 Bithead
  • 2613 Views
  • 1 replies
  • 0 Likes

Global Protect client showing Gateway name instead of Best Available

In my companies environment we have about 12 Gateways. Most of our machines have GP 5.0.8-4 installed. With no preferred gateway selected, I've seen a few cases where the GP client shows the gateway it's connected to instead of Best Available. From what I've seen the norm seems to show Best Available and you have to go into the GP client setting...

popeja by • L2 Linker
  • 5256 Views
  • 3 replies
  • 0 Likes

Remote Access through IPSEC?

Hello,I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with.In case this isn't clear.... the WAN interface of the PA220 would service both the remote access vpn and the ipse...

Load balance a clientless application

Hello evrybody, some of our customers make heavy use of the Clientless VPN feature of the GlobalProtect Portal, and one of the most used application this time is the Apache Guacamole remote desktop gateway (https://guacamole.apache.org/). The GP Portal is configured to show the icon of this app and clicking on the app, of course, the remote us...

grenzi by • L3 Networker
  • 8306 Views
  • 5 replies
  • 0 Likes

Unable to install Global Project for Mac for M1 processor

Hi guys, Tried multiple times, best result was the icon showing with a "cancel" sign. Deleted the app, tried to install again and now the icon doesn't show up even though installer finishes correctly. I saw a post it works fine with version 5.2.4 and 5.2.3 but I can't seem to find where to download those specific versions Any help is greatly ap...

avchiva by • L0 Member
  • 3165 Views
  • 1 replies
  • 0 Likes

DNS suffix not applying

Hello, I have deployed a GlobalProtect gateway in an office that uses a different domain than our own. To that end, I have added their dns suffix to the gateway but when I connect onto that gateway, the suffix is never appended. I cannot access their domain resources unless I use FQDN. In the logs, I see the config being sent and it does in...

COlson by • L2 Linker
  • 15376 Views
  • 15 replies
  • 0 Likes

Global Protect VPN disconnects on Windows while active

We are having an issue where Global Protect VPN on Windows 10 is disconnecting after 4 hours while it is still active. We have the inactivity logout set to 4 hours. Our Macs aren't having any issues. The HIP log on both the mac and windows machines shows the check running successfully every hour. We have ruled out sophos, windows defender, a...

Resolved! GlobalProtect HIP Check when connecting to external gateway

I have GlobalProtect portal/gateway configured and working in my environment. External users can connect to the GP portal/gateway and receive network access. I have set up a HIP profile to check for domain joined and AV updated in the last 3 days. What I'd like to do is have the HIP check run during the initial connection to GP portal/gateway, s...

Performance degradation VPN gateway

We recently enabled/ configured/ deployed GlobalPortect on our PA firewall as a first step to replace our existing DirectAccess VPN solution. The GlobalProtect is a brand new installation, performed by a PaloAlto authorized consulting firm. We are piloting 3 business users and 5 IT, group users. Our 3 business users are complaining on a daily ba...

Erasmo by • L0 Member
  • 3049 Views
  • 1 replies
  • 0 Likes

Can I create a dual globalprotect gateway on my firewall with ISP failover?

We have 2 ISP on our PA-850. We have 1 VR with both ISP set as the default route for primary and backup internet (different metrics) with a static route monitoring failover process. I have configured ISP1 for GP-gateway1 and and ISP2 for GP-gateway2. In this case, I wasn't able to connect to the second GP-gateway. I tried configuring 2 VRs, ISP1...

Resolved! Globalprotect pre-logon VPN and Azure AD Hybrid join

Hello everyone,We are looking at using GP for the purposes of joining offsite computers to our domain via a process called offsite Azure Hybrid AD join. More details: https://oofhours.com/2020/05/23/digging-into-hybrid-azure-ad-join/https://oofhours.com/2020/06/23/windows-autopilot-user-driven-hybrid-azure-ad-join-which-vpn-clients-workThe basic...

BrianNFC by • L1 Bithead
  • 15738 Views
  • 3 replies
  • 1 Likes

SSL set up

I am an intern right now who is working as a tableau server admin. My organization is working to try to set up SSL keys with our server https://help.tableau.com/current/server/en-us/ssl_config.thmHow do I know if the certificate of the server I manage is self signed? The certificate seem to have a few issue that cannot figure out. I am learning ...

  • 1720 Posts
  • 67 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks