This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Integrating 2 different LDAP servers in Palo Alto for Global Protect VPN authentication.

Hi, We have a requirement as users belonging to 2 different domains (for eg: local.ae & local.co.ae) need to connect via Palo Alto global protect VPN. Is it possible to integrate Palo Alto with 2 different LDAP profile, so that both local.ae & local.co.ae domain users can connect remotely over Global Protect VPN.

preetpk by • L2 Linker
  • 4298 Views
  • 3 replies
  • 0 Likes

[Global Protect][Clientless VPN][Automatic authentication]

Hello community, can I set up the GlobalProtect VPN clientless to connect and authenticate automatically without human intervention? Actually, I have a web server on which my website is hosted, and I'd like it to communicate with my branch's local server via global Protect. I put my VPN's public IP address in the script, but it doesn't work, I b...

Resolved! Remote initiation of Global Protect Logs

I have some GP users who like to complain about their GP connection but with whom are difficult to book troubleshooting time. Could there be any way to remotely collect detailsof their GP session without having to tell them how to initiate a log capture or remotinginto their machine? Perhaps something could be pushed to their laptop via Azure Au...

IOS Global protect Issue

HiWe are using PA-220 with OS 10.0.6Self signed certificate got expired, after renewal of certificate all IOS devices are not connecting through global protectWindows and android devices are connectingIOS ver 14GP ver 5.2.9-8Error reported on IOS device "Gateway Apple: The network connection is unreachable or the gateway is unresponsive" Kindly ...

das711 by • L0 Member
  • 2189 Views
  • 1 replies
  • 0 Likes

Global Protect Authentication SSO

Hello Guys, While Global Protect is configured in SSO mode and authentication method is through Active Directory. So while a AD user changes his user login password it doesnt gets auto update for Global Protect, by this i mean user has to manually authenticate with new passowrd. Is there any way this can be automated.???

GLOBAL PROTECT AND NAT

Hello Everyone, I'm new here.I have one issue i have configure source NAT on my public interface to permit my local computer to have internet (it work well)Now i try to configure global protect on the same Public IP. And it not working.But when i disable NAT policy Global Protect work well.Can you help to run Global protect and Source NAT on the...

Global protect clientless vpn - not rewriting an database query properly

We have an application that we moved to the Palo's clientless vpn. When you perform a database query, the .aspx portion of the query is chopped off and you get this page isn't working. Didn't send any data. But I can see from the rewrite string that the .aspx page missing and just an empty query is left. I have a ticket open with Palo but t...

Globalprotect is not working on IOS

The certificate expired on 19/10/2021.Due to this we were getting certificate errors in the devices and were unable to connect.We renewed the certificate in the firewall box, after that we are able to connect from Laptops & android devices, but ios devices are still not workingAs you are aware that we are facing problem in connecting IOS dev...

Captive - Portal Logout Options

Hello Techies,Can anyone please help to provide a solution if we want to enable an option of logout feature which can clear user-mapping / session from the firewall in the backend. We are just using the default captive portal page and not having any other server Firewall : 7KOS : 8.1.13 @Remo @kiwi

Automatically Add Global Protect Portal Address to Global Protect Setting

Please provide input on the following scenarioCurrent VPN Portal address = vpn1@domain.org (sample ip 1.1.1.1)New VPN Portal address = vpn2@domain.org (sample ip 2.2.2.2) What is the best way to transition users from the current vpn portal to the new vpn portal and minimize downtime?Is there a way that the new vpn portal address can be automatic...

Resolved! Azure AD GlobalProtect Clientless Portal / SAML Domain issue

Hi All, I am able to authenticate users against the portal with SAML and Azure AD all good. Since I can't pull groups from Azure I'm using LDAP for the portal and policies also working. The issue is that the user from Azure is coming down to the firewall as doman.local\user while on prem LDAP is just domain\user. Any way to drop the .local at th...

SSL Decryption Exclusions Jamf Protect

We are trialling Jamf Protect but this doesn't support SSL decryption which we use as standard (https://docs.jamf.com/jamf-protect/documentation/Network_Communication_Used_by_Jamf_Protect.html) The above doc lists some URL's that need to be excluded from SSL decryption but we are having problems getting it to work. Packet captures show that the ...

Craig-f3 by • L0 Member
  • 2222 Views
  • 0 replies
  • 0 Likes

Global Protect Connectivity Issue

Hi guys, The issue I am having is that when someone RDP's onto on a machines they lose connectivity on global protect. I originally thought global protect was disconnecting, however on closer inspection i can see that when the user is connecting to RDP, he is using a different user name which in turn is knocking of their connection their conne...

Globalprotect-Need use Local database users and PingID for auth(MFA)

hello teamWe have this small database of users for Global Protect for our staff , however, we will like to add the MFA with PingID, following the configuration steps from vendor alyways mention LDAP as an authentication server, then our question: could we use the local database from the PA and not to jump to an AD server?did someone had have exp...

Cannot connect to service, error: 10056

Hi all, My end-users can't use Global Protect recently, the "Connect" button is unresponsive.I've checked the log & see as below: (T9408) 10/12/21 08:50:45:879 Error( 625): Send failed with error: 0(T9408) 10/12/21 08:50:46:379 Info ( 246): InitWinConnection ...(T9408) 10/12/21 08:50:46:379 Error( 250): Cannot connect to service, error: 1005...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks