This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect VPN disconnects on Windows while active

We are having an issue where Global Protect VPN on Windows 10 is disconnecting after 4 hours while it is still active. We have the inactivity logout set to 4 hours. Our Macs aren't having any issues. The HIP log on both the mac and windows machines shows the check running successfully every hour. We have ruled out sophos, windows defender, a...

Resolved! GlobalProtect HIP Check when connecting to external gateway

I have GlobalProtect portal/gateway configured and working in my environment. External users can connect to the GP portal/gateway and receive network access. I have set up a HIP profile to check for domain joined and AV updated in the last 3 days. What I'd like to do is have the HIP check run during the initial connection to GP portal/gateway, s...

Performance degradation VPN gateway

We recently enabled/ configured/ deployed GlobalPortect on our PA firewall as a first step to replace our existing DirectAccess VPN solution. The GlobalProtect is a brand new installation, performed by a PaloAlto authorized consulting firm. We are piloting 3 business users and 5 IT, group users. Our 3 business users are complaining on a daily ba...

Erasmo by • L0 Member
  • 3020 Views
  • 1 replies
  • 0 Likes

Can I create a dual globalprotect gateway on my firewall with ISP failover?

We have 2 ISP on our PA-850. We have 1 VR with both ISP set as the default route for primary and backup internet (different metrics) with a static route monitoring failover process. I have configured ISP1 for GP-gateway1 and and ISP2 for GP-gateway2. In this case, I wasn't able to connect to the second GP-gateway. I tried configuring 2 VRs, ISP1...

Resolved! Globalprotect pre-logon VPN and Azure AD Hybrid join

Hello everyone,We are looking at using GP for the purposes of joining offsite computers to our domain via a process called offsite Azure Hybrid AD join. More details: https://oofhours.com/2020/05/23/digging-into-hybrid-azure-ad-join/https://oofhours.com/2020/06/23/windows-autopilot-user-driven-hybrid-azure-ad-join-which-vpn-clients-workThe basic...

BrianNFC by • L1 Bithead
  • 15670 Views
  • 3 replies
  • 1 Likes

SSL set up

I am an intern right now who is working as a tableau server admin. My organization is working to try to set up SSL keys with our server https://help.tableau.com/current/server/en-us/ssl_config.thmHow do I know if the certificate of the server I manage is self signed? The certificate seem to have a few issue that cannot figure out. I am learning ...

Resolved! Global Protect upgrade allow transparantly does not work properly

I am currently testing a profile in the GP portal to allow transparant upgrades for a select group of users.The profile 'Any' is not allowed to upgrade.Current version of GP agent: 5.1.4. Upgrade version now active: 5.2.4 All users in the selected group reported they received the interactive popups to perform download and install.One user perfor...

I cannot integrate System Logs for Global Protect Authentication to ArcSight

Please I am having difficulties integrating Authentication Logs for Global Protect to ArcSight. I can see the logs on the firewall dashboard (under System Logs) but these logs are not integrated to ArcSight. Traffic & Threat logs are currently integrated on ArcSight but I need to see login authentication logs for Global Protect. Please assis...

globalprotect linux client

Hello I want to ask does native linux client (version 5.2) support saml auth with microsoft as a identity provider?I tried it on ubuntu 18,20 and centos 7.IThe native client could not pass server certificate validation.Other client returns false after hitting SAML20/SP/ACS url Thanks

olriss by • L1 Bithead
  • 8080 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect with Azure MFA setup

Good Morning Everyone,Has anyone had any luck setting up MFA on the Palo Alto with Global Protect with Microsoft Azure MFA (Hybrid) I tried opening a ticket with the support team and they said they had no clue how to setup but could support it if broken and told me a "Sales" Engineer would reach out to me sometime that day. That was 4 business d...

GlobalProtect SAML message customization

Hi, Is was wondering if it is possible to customize the "To continue, check your browser in GlobalProtect and sign in" message from Global Protect?Reason why I would like to change this message is that it confuses our end users as we are using the GlobalProtect browser itself and not the default browser to handle the authentication. The GlobalPr...

joris_vd_0-1607444810173.png
joris_vd_1-1607444960696.png
joris_vd by • L1 Bithead
  • 3789 Views
  • 1 replies
  • 0 Likes

systray icon shows red X when connected

See screen shot. It is connected (I actually have connection thru the VPN) but the systray icon shows a red X. See screenshot below.Version is 5.1.6-16 This used to work correctly before, but today I noticed it does not. I tried disconnecting and then connecting again, but systray icon still shows red.

GPbug.png
xerces8 by • L1 Bithead
  • 6579 Views
  • 6 replies
  • 0 Likes

GlobalProtect Internal Gateway - Non-tunnel mode - does it provide encryption?

Hello Experts, Can you please clarify if Non-tunnel mode provide packet encryption, or just HIP/User-ID for the gateway? Does the traffic goes in from GlobalProtect (laptop) to GlobalProtect gateway (firewall) in non-tunnel mode setup? If it is encrypted, how much of IP header retained, is it just IP or ports are in clear as well? It is not cle...

SergGur by • L2 Linker
  • 7316 Views
  • 1 replies
  • 0 Likes
  • 1711 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks