GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Again Modified Username in GP Client after Update

Hi Folks,A year or so ago we tried to upgrade our Global Protect 5.0.3 to the recent prefered version with the result that many of our users get the chineese / asian letters in username BUG after the Upgrade.Now we tried again with 5.1.6 and instead of Chineese Letters we get four QuestionsMarks for the Username after the Update. I realy get ann...

2020-10-08 21_06_50-Windows 10 Pool 1.png

iPhone 11 iOS 14.1 Cert issue for global protect

I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained. On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, and also certificate authority), then I cut a cert called gp-cert (issued by intermediateca, non c...

GP Welcome Page Pop-Up Placement

Hi, We have a number of GP users operating clients running 4.07 and some using version 5.x. There is an odd (Annoying) issue that those running the later versions of GP have noticed and its to do with the pop-up placement of the Welcome Screen. In 4.07 the Welcome screen appears after the authentication has been successful with the GP gateway....

MHaran by • L1 Bithead
  • 5742 Views
  • 3 replies
  • 1 Likes

Resolved! Global Protect Pre-Logon conflicting with User-ID agent

We are trying to deploy pre-logon, we have security policies around pre-logon users, and then security policies for actual users once they authenticate. Basically, an initial pre-logon rule that allows access to domain controllers, etc., followed by a pre-logon deny all rule, followed by rules for users that have fully authenticated to GP. All...

buck1 by • L1 Bithead
  • 6994 Views
  • 3 replies
  • 0 Likes

GP Upgrade issues

Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to repair the app (No UAC prompt in Zoom). The issue is after what looks like a successful upgrade th...

antha124 by • L0 Member
  • 2841 Views
  • 1 replies
  • 0 Likes

GlobalProtect VPN SSL - disconnect

Hello, I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed" PAN-OS 9.0.7GP Agent : 5.0.8 Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?

Global Protect Configuration during client installation

Hello. Is there a way to install the Global Protect configuration during the installation? Our PC imaging process installs GP and also adds the portal address but the configuration is not there until a user logs into the PC and then signs into Global Protect. We are trying to have a remote user be able to sign into their newly imaged device ...

Resolved! Chinese characters are populating automatically in GP username logging fiel

I am having experience in the global protect agent login window when the user starts logging from the machine. Chinese characters are populating automatically in the GP agent username logging field window, and users have to clear the character to enter their username logging into GP.And this issue came after the upgrade of the Palo Alto global p...

GP.JPG

Globalprotect Clientless VPN and VClient Certificate

Hi All, I have recently configured a clientless vpn for a customer but the solution needs client certificates for the users to log in with a browser. Is there a way I can make this an authentication only solution with no client certificate requirement? The GlobalProtect configuration is configured and working for staff members using PreLogon suc...

a.jones by • L3 Networker
  • 3214 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect error after upgrading

Hi, Have some users after upgrading to GP 5.1.6 that are getting this error. Has anyone come across this? I've seen it with other DLLs before, but not this specific one. GP seems to be working fine, despite the error The code execution cannot proceed because PsvCtrl.dll was not found. Reinstalling the program may fix this problem Trying to d...

MikeC by • L3 Networker
  • 3336 Views
  • 1 replies
  • 0 Likes

Geo location IP problem

Hi,My name is Anthony, and we are ISP from Montreal, Canada.It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is situated in Quebec, Canada .This is problematic for us, in times of Covid19, cause many of our cus...

Anthony by • L0 Member
  • 2942 Views
  • 1 replies
  • 0 Likes

Resolved! SAML Testing

We have SAML for GlobalProtect setup and working on our test PA firewall and cannot be used for production.Our goal is to configure our production firewalls to use SAML for GlobalProtect and limit specific AD groups for testing until we make SAML global. I know SAML can't be used in an Authentication Sequence, and adding a Client Authentication ...

Exclude Video Traffic - Global Protect

Hi there, We've setup our global protect to exclude all video traffic, using this guide: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways/exclude-video-traffic-from-the-globalprotect-vpn-tunnel.html The firewall has all the relevant licenses required (GP...

  • 1718 Posts
  • 67 Subscriptions
Top Solution Authors
Labels