GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

GlobalProtect logged in user issue

Hello Mr. After changing from GlobalProtect 5.1.14 to 5.2.8 it's very noticed that added authentication user such as mydomain\myusername just change it self to myusername only just by itself which doesn't allow it to access the resources.Why that? Any ideas?

GlobalProtect app 5.1.9?

Hello, In the Palo Alto Networks Security Advisories / CVE-2021-3057 it refers to the issue being fixed in GlobalProtect app 5.1.9 - however, when either looking for it in the list on the firewall (after refreshing the list by 'Check Now'), or looking for it in the Support portal, I am unable to find it to download, or basically any other refere...

What if my global protect client version is 5.2.7 got affected due to vulnerability CVE-2021-3057 ?

As per client requirement, I checked that client has global protect client version 5.2.7. Now According to CVE-2021-3057 Vulnerability this version got affected. If I will update the current version from 5.2.7 to 5.2.8 then this vulnerability not affected.But according to PANOS release guidance, global protect version 5.2.8 is under monitor. So ...

Documentation for LSVPN deployments

Does anyone have access to, pointers to, or stashes of better documentation for how LSVPN works? Something along the lines of "best practices" for configuring routing for the satellites? Or with "big picture" information on how all the pieces work together? The GlobalProtect Administration Guide and the PanOS Admin Guide show you all the nitty...

fjwcash by L4 Transporter
  • 2219 Views
  • 0 replies
  • 0 Likes

Global Protect - exclude video traffic not working

Hello, Did somebody successfully implement this feature ?I'm working on GP 5.0.7 and PANOS 8.1, also we have a Global Protect Gateway license active. I want to exclude video traffic from the VPN tunnel. So I go to my external gateway, and enable exclude video traffic. The tunnel mode is enabled, and also in the agent config, the split tunneling ...

MMerlier by L1 Bithead
  • 11907 Views
  • 7 replies
  • 0 Likes

Resolved! Global Protect connection issue

Hello community,I'm having trouble connecting to the global protect VPN after assigning security profiles (AV ,Anti-spyware,Wildfaire,..) to the rules.In reality, the link became unstable. Any advice 🙂 Many thanks.

Linux CLI GlobalProtect with SAML MFA connection problems

Hi Hope someone can help. I am running into problems with Ubuntu 20.04 users that want to use CLI only. When I try to use the CLI GP client(tried version 2.4 and 2.6) on Ubuntu it opens the default browser and the MFA via Okta is successful but then nothing happens. The VPN is never setup. The last message on the CLI is "Try to launch default b...

Hendre by L0 Member
  • 7707 Views
  • 2 replies
  • 0 Likes

LSVPN "Missing Satellite certificate profile" error on login

Trying to get an LSVPN setup (GlobalProtect Satellite) working and getting this error when the Satellite tries to authenticate to the Gateway: "Missing Server certificate profile". I can't find any information on this error anywhere. [Edit: CLI logs show this is actually "Missing Satellite certificate profile". However, I still can't find any...

fjwcash by L4 Transporter
  • 3849 Views
  • 2 replies
  • 0 Likes

Using Attributes to control Global Protect Access

I'm using Google as my IDP to authenticate access to Global Protect for the bulk of my users. I have a second gateway/portal that is just local users/groups and I have policies that restrict their access, and I want to mimic that with my main PortalGateway. Ideally I want to pass an attribute to PA that says this person gets this access. I am f...

JJancel by L0 Member
  • 2625 Views
  • 2 replies
  • 0 Likes

Resolved! Global Protect pre-logon then on-demand configuration

We're using these versions (Yes, we need to upgrade, but other priorities at the moment)PANos 8.1.14Global Protect client 5.2.1 We're currently usingOn-Demand, which is working. We used this page with the only difference is we're using AD Authentication.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClH2CAKNow we want ...

Globalprotect mobile clients unable to resolve DNS

Is there a way to restart the Globalprotect module? PC and Mac users on Globalprotect are unaffected, its only on mobile devices.This suddenly stopped working this morning. I even tried manually setting the DNS in the VPN profile to our internal DNS but is still not resolving. This is happening to all clients starting this morning.

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels