I’m wondering if it is possible to have GP gateway and IKE gateway on the same interface and same public IP.
Good afternoon all, I am hoping someone can give me guidance on how to install the Palo Alto Global Protect Client on a Virtual Box VM Windows 7x32. The error I get during an install is similar to this, "not compatible with the processor" or something to the effect that "processor is not supported." Thank you to everyone in advance for your help.
Hi would like to know if there's a way to have a user connects to the VPN via GP and then upon switch user let another user connect with the laptop and establish the VPN connection and return to the first user and disconnect. this is purely for the support perspective would like IT team to connect to the machine and then establish VPN and switch...
Hi All , We have issue where user get VPN error when unlocking PC post it returns from sleep mode . After manual refresh its working as expected . Any suggestions on this . Thanks
The customer has three gateway configured.1)SLC1 Centurylink2) SLC1 Verizon 3) CORP VPN.>When they switch gateway from CORPVPN>>SLC1 Verizonor CORPVPN>>SLC1 Centurylink it gives an error.>This only happens on the windows machine on MAC it's working fine.>Please refer to the attached screenshot. I also checked with GP 5.1.6 a...
Hi, When and how to you add the new macos BigSure to your HIP Object selection? thx
So I have added 2 new isp's with dedicated connections for gp.With 200 plus users and they aren't savy, how does one push the new ip's to the end point so it's in their list?I did not find a the gp ip portal list in the registry.Nor some other file that gp uses so where is it storing the ip list it displays to end users?Thankpa3220, gp 5.1.3
Hi Folks,A year or so ago we tried to upgrade our Global Protect 5.0.3 to the recent prefered version with the result that many of our users get the chineese / asian letters in username BUG after the Upgrade.Now we tried again with 5.1.6 and instead of Chineese Letters we get four QuestionsMarks for the Username after the Update. I realy get ann...
I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained. On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, and also certificate authority), then I cut a cert called gp-cert (issued by intermediateca, non c...
hi friends, I am trying to understand, which is the best among the below 2 IPSec encryptions? 1. "aes 128-cbc"2. "aes 256 -gcm"i am looking for opinions based on security and reliability. Thanks !!
Hi, We have a number of GP users operating clients running 4.07 and some using version 5.x. There is an odd (Annoying) issue that those running the later versions of GP have noticed and its to do with the pop-up placement of the Welcome Screen. In 4.07 the Welcome screen appears after the authentication has been successful with the GP gateway....
We are trying to deploy pre-logon, we have security policies around pre-logon users, and then security policies for actual users once they authenticate. Basically, an initial pre-logon rule that allows access to domain controllers, etc., followed by a pre-logon deny all rule, followed by rules for users that have fully authenticated to GP. All...
Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to repair the app (No UAC prompt in Zoom). The issue is after what looks like a successful upgrade th...
Hello, I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed" PAN-OS 9.0.7GP Agent : 5.0.8 Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?
Hello. Is there a way to install the Global Protect configuration during the installation? Our PC imaging process installs GP and also adds the portal address but the configuration is not there until a user logs into the PC and then signs into Global Protect. We are trying to have a remote user be able to sign into their newly imaged device ...
PavelK
on:
GP logs
Raido_Rattameis
