This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Geo location IP problem

Hi,My name is Anthony, and we are ISP from Montreal, Canada.It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is situated in Quebec, Canada .This is problematic for us, in times of Covid19, cause many of our cus...

Anthony by • L0 Member
  • 2903 Views
  • 1 replies
  • 0 Likes

Resolved! SAML Testing

We have SAML for GlobalProtect setup and working on our test PA firewall and cannot be used for production.Our goal is to configure our production firewalls to use SAML for GlobalProtect and limit specific AD groups for testing until we make SAML global. I know SAML can't be used in an Authentication Sequence, and adding a Client Authentication ...

Exclude Video Traffic - Global Protect

Hi there, We've setup our global protect to exclude all video traffic, using this guide: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways/exclude-video-traffic-from-the-globalprotect-vpn-tunnel.html The firewall has all the relevant licenses required (GP...

I got an error while uninstalling GlobalProtect

hi, all I had a working version of the 64 bit Windows version of GlobalProtect installed on my secondary hard drive on my Windows 10 laptop. My hard drive completely failed recently, disappearing from Windows. GlobalProtect still showed up in the Add or Remove programs list but I could not uninstall it as it said there were files missing. I tri...

Resolved! GlobalProtect App for Android on Managed Chromebooks Using the Google Admin

Hi we want to deploy Global-protect app for Android on managed Chromebooks using Google admin console.Requirement: every device needs to be uniquely identified and then allowed. Kind of a device whitelisting for example Host id for windows.Problem 1: when the GP app running in Android container on a Chromebook managed by google admin console, my...

lrangra by • L1 Bithead
  • 7750 Views
  • 4 replies
  • 0 Likes

GlobalProtect upgrades & issues on DHCP option 43 code

Hello All, Since last year, we are using GlobalProtect 5.0.4 along with DHCP options 43 to detect the Internal GP GW FQDN. The GP client then connects to the branch office GP GW and pushes the User-ID - as it should. Since I updated our main PA 5520 cluster to PAN OS 9.1, I also upgraded a newer version of GlobalProtect (v.5.1.1 and then v5.1.2)...

Rievax by • L2 Linker
  • 5833 Views
  • 3 replies
  • 0 Likes

Resolved! 2FA for SSLVPN User.

Hi Guys, I want to achieve 2FA for SSLVPN user, for 2FA the vendor is SafeNet.Does Palo Alto supports SafeNet for 2FA and if does how can we Configure it. Many thanks in advance. Regards,Osama.

Local Printing Non-Split Tunnel

Does any know if it possible to allow access to local network printing when you have Global Protect setup to route everything over the tunnel ("No direct access to local network" option enabled). I've been looking at the Exclusion section and see options to exclude Client Application, would this over ride the "No direct access to local network"...

CmpDR196 by • L1 Bithead
  • 8225 Views
  • 3 replies
  • 0 Likes

certificate format from CA to clients and GP

Hello Team Our GP is running with users authenticating via AD account Now we are rolling out Machine certificate via Group Policy from our Microsoft CA server to all the Domain clients and then the goal is to enable certificate check in addition to AD authentication for Global protect corporate users My question is when Microsoft CA issues certi...

Resolved! GlobalProtect with SecurEnvoy as a RADIUS Server

Hi everyone,I have got a customer who like to use his SecurEnvoy Server for RADIUS with global protect.I have done the configurations following this guide:https://www.securenvoy.com/en-gb/integration-guides/vpn-remote-access/palo-alto-ad-integrationThis dokument is outdated, we are using PAN OS 9.0.5 and GP 5.1.3 After some trial and error we go...

rwieseke by • L0 Member
  • 3815 Views
  • 1 replies
  • 0 Likes

Global Protect Logs in CEF Format

Hi Everyone,I need to send Global Protect logs to Arcsight connector in CEF format.looking through all documentations of CEF configuration Guide that are available, there is nothing mentioned about Global Protect logs and how to convert them to CEF format.Anyone has an idea how to accomplish this ?

A.Kassis by • L0 Member
  • 5769 Views
  • 3 replies
  • 2 Likes

GlobalProtect Mixed Gateway Always-On

Hi All, As per this article (https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/globalprotect-quick-configs/mixed-internal-and-external-gateway-configuration) if I set my portal to User Logon (Always-On), my internal gateway will try to connect, but my external will not (it will have to be done manually). This is what I wan...

Global Protect Silent App Deployment

Hi Guys, I have implemented global protect with pre-logon with device certs. It is working as expected. I have customized GP msi to add the portal name and to install silently. However it looks like users need to add their username/password for the first time and after that users don't need to enter the credentials again. Is there anyway to auto...

Namalw by • L1 Bithead
  • 5360 Views
  • 3 replies
  • 1 Likes

GlobalProtect Reporting Port Exhaustion on Win 10?

Anyone else seeing a lot of this lately? I've been researching this over and over again for about 2 weeks and all signs point to Windows being the culrpit, but the only time we ever see this happen is when users are connect to GlobalProtect. Here's the culprit log from GPS:connect failed with error 10055(An operation on a socket could not be pe...

  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks