GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Linux CLI globalprotect connect. Error: No Network Connectivity

I am trying to connect to my university's VPN. I have installed the CLI version of globalprotect on my laptop running Arch Linux. The university pointed me to a location to download a tarball with 5.1.1.0-17 debian packages. I believe I have successfully installed fine (although a reboot was needed).I receive the following error when I try to us...

RyanBF by L0 Member
  • 4915 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect Connected after Deny on MFA

Hi all,I am using global protect with MFA provided by Azure Authentication.After put user and password, I had received the push on my mobile and the connection is established when I click on deny.I can see the radius sendind access-reject to firewall, but the connection is performed normally. Anyone has this problem or know how can I fix it?

bborges by L1 Bithead
  • 3225 Views
  • 1 replies
  • 0 Likes

Split tunneling based on the domain is not working.

Split tunneling based on the domain is not working. We need to monitor our user's web traffic while they are on roaming. While users need to connect GlobalProtect and Cisco Any connects simultaneously, some traffic should go via Cisco Any connects and rest of them via GlobalProtect. I tried split tunneling based on the domain but no luck. Is the...

Global Protect Portal and weak cipher sets

Has anyone had success getting past a B on ssllabs for the globalprotect web portal. i have created the below ssl profile and bound it to the global protect portal. even though enc-algo-aes-128-cbc andenc-algo-aes-128-gcm are set to know, they still appear in the test show shared ssl-tls-service-profile TestSSLTestSSL {protocol-settings {min-ver...

JeremyD by L0 Member
  • 7226 Views
  • 2 replies
  • 0 Likes

GlobalProtect disconnect when remote machine display turns off

Hello, I am experiencing disconnects from a vendor GlobalProtect VPN on a remote machine when I close local RDP sessions to the remote machine. This issue is preventing automated jobs from running properly unless someone is RDPed into the machine. I have been working with the vendor (and my own Google-fu) on this issue for a month to no avail an...

Resolved! GlobalProtect Gateway Portal and IP via DHCP Public IP

Hi All, I have a question. Can we deploy a GlobalProtect (Gateway and Portal) on Strata Firewall via DHCP Public IP? I am familiar with configuration via public static IP. But on dynamic public IP, what if the ISP Leased you a brand new IP? What will be the behavior of it on the Strata firewall and the end users?Best Regards,Victor

Resolved! Global Protect Client App Customisation

Hi Folks,We have customised the GP Portal with our company Logo and some info for the users. Our director seen this and is happy.However, most of our users get the app deployed to their machines via GPO. Branding is important to our senior team. Therefore we have a wish to place our Logo in the app and possibly change the App Title to be more fr...

GN_ROS by L1 Bithead
  • 4280 Views
  • 1 replies
  • 0 Likes

Global Protect Prelogon not working

Scenario is we recieve new laptop with pre loded certs. I want that laptop to get connected to globalprotect gateway using pre-logon once it has IP it will get connectivity with DC and later it gets renamed to user name we login.I am working on above scenario but unable to get it working.That new laptop get pre-logon registry settings pushed lik...

Gateway side not seeing Satellite published subnet

I've just set up a PA-850 as a satellite to my main 3050 and the connection seems good. All the subnets published by the Gateway can be seen by systems on the Satellite side. However, the subnet being published by the Satellite can't be seen on the Gateway side. According to the Satellite Info section of the GP Gateway, it does see the satellite...

Resolved! Global Protect Certificate Authentication

Hi Team, We are using self signed certificate for user authentication signed by self-signed CA cert on Palo Alto for our global protect. does my understanding below is correct regarding certificate expiration/renewal. 1. if CA cert expired while user cert still valid, user does not need to install renewed CA cert.we can renew the CA cert on palo...

L1_ENG by L1 Bithead
  • 4916 Views
  • 2 replies
  • 0 Likes
  • 1685 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels