This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

On demand GP MFA with manage engine identity 360 and NPS server

The current setup for User VPN Connection requires users to log in using their email address as the username and OTP from google authenticator as the password. For VPN Client Verification, we would like to update the configuration to include password-based authentication for each user. Example: User logs in with their email address (username) a...

Globalprotect VPN assign a public IP to an internal server

I am currently running a PA-1410 and utilizing Globalprotect VPN and within that network I have a /24 internal subnet. I have attempted to set up a DNAT to assign a public IP to an internal server within the Globalprotect environment but I am not able to communicate to the public IP as it times out. I have allowed all traffic on the firewall to ...

aarreola by • L0 Member
  • 739 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect portal unresponsive error after upgrade to OSX 15.4

PA-820 GlobalProtect version: 6.3.2 PanOS 10.1.14-h10 Mac OSX version: 15.4 On attempting to connect with GlobalProtect, the error message "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." appears. All users on OSX 15.3 are still able to connect without any errors or issues. A...

Global Protect Client Crash 6.3.3

Hello Everyone, We are running into very strange situation where Global Protect client "6.3.3" is not starting, you click the icon but nothing is working I tried check task manager it's there's but almost not consuming any resource. this happens over all company devices.I tried installing the application in bran new laptop, it starts successfull...

Global Connect icon in the Task Manager Tray not showing as Active

When Global Protect is running it should show a short bar underneath the Icon, but it doesn't. When I click the Icon to show the small Global Protect window it does get the longer "window that has current focus" bar, which is correct, but as soon as that little window is hidden the bar goes away completely, but since it is running it should show...

GlobalProtect Gateway on PA-820 Stopped Responding – Guidance Needed

Hello Community, I would like to ask for your guidance on an issue i experienced. Environment: 2x PA-820 firewalls in active/passive HA cluster PAN-OS 10.2.13-h5 (upgrade to 11.1.10-h1 planned soon) Internal GlobalProtect Gateway configured on loopback interface Issue:Yesterday, the GlobalProtect Gateway on the active firewall suddenly s...

A.AlHafi by • L1 Bithead
  • 1309 Views
  • 1 replies
  • 0 Likes

Display IPSec to SSL Fallback Notification edit

I want to change the GlobalProtect App notification from "Display IPSec to SSL Fallback Notification" like shown here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001Uh1CAE&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail where can i edit this?

When GlobalProtect exceeds Login Lifetime cannot reset/access the application

When GlobalProtect times out and disconnects user from VPN after exceeding the end of the "Login Lifetime" setting. (15 hours in my case) You cannot run the application to restart a new session. You have to go to the Task Manager, kill the GlobalProtect task and then you can go and run GlobalProtect to login and start a new session.

Auto connect based on interesting traffic

Hello, Currently we have deployed GP in On Demand mode where users have to manually open GP client and connect to VPN. I'm looking for possibility of auto connecting to GP VPN when interesting traffic is detected without enabling Always ON VPN. For example, an employee is working without connecting to GP VPN. However, if they click on a link f...

PAFWNoob by • L1 Bithead
  • 1675 Views
  • 1 replies
  • 0 Likes

Resolved! SPlit tunneling issue on GlobalProtect

Hello Community, We would like to configure split tunneling on Global Protect settings for Webex traffic. We have the GlobalProtect Gateway License active and enabled. We have already configured a list of Subnet network excluded in GW >> Agent >> Clients settings >> Split Tunnel >> Access route >> Exclude H...

Multiple Logins on internal network (macOS Platform SSO)

Hi guys, we`ve just extended our platform sso for macOS compareable to bestpractise from microsoft (or even linked here in the forum to set up psso with intune) The goal was to have a more seamlessly user experience and on the other hand let Entra receive the device state from apps like GlobalProtect so that we can enable Compliance based acce...

sebamedo by • L0 Member
  • 1394 Views
  • 2 replies
  • 0 Likes

Resolved! Global Protect VPN only on domain joined devices

Hello we are using SCM for our NGFWs and try to connect via Global Protect. Using Radius Auth we can login with any client/os we those, but we want only domain joined device (w11,ios,ipad) to be connected via VPN. Where we must configure SCM to look at M365 for company devices? Kind regards

R.Kniger by • L1 Bithead
  • 2271 Views
  • 4 replies
  • 0 Likes

GlobalProtect Design Question

We have two on-premises GlobalProtect Portals on two different HA systems in different locations in the state, we would like a simple process to handle when/if a site goes down for the end-users. Both portals are named different: East-Portal West-Portal Is it possible to have an AWS Application Load Balancer send traffic to the portals? Has ...

  • 1708 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks