Multiple Global Protect Portal Realms

Hi,

We have a Global Protect portal available to our users via a public facing URL.  Question I have is whether the Palo Alto solution can support multiple portals based on the same URL and interface IP to serve different authentication profiles.  Ex

Global Protect Configuration during client installation

Hello.  Is there a way to install the Global Protect configuration during the installation?  Our PC imaging process installs GP and also  adds the portal address but the configuration is not there until a user logs into the PC and then signs into Glo

Two Phase VPN

Hello,

I have a question regarding the possibility of a 2 phase VPN connection. Please see below for a description of the scenario.

User A logs in to global protecting when logging on to their PC. I have this part completed using User logon (Always o

Globalprotect Clientless VPN and VClient Certificate

Hi All,

I have recently configured a clientless vpn for a customer but the solution needs client certificates for the users to log in with a browser. Is there a way I can make this an authentication only solution with no client certificate requiremen

Something about Global Protect agent seems off

It looks like Global Protect is a hot issue and specifically in combination with prelogon functionality.

We're also having a situation that appears to difficult to explain.

The idea is:

When handing out devices with global protect preinstalled and prec

Client vs Clientless for Web Application

For a browser based web application over a cellular connection, would the Clientless VPN be any more reliable (connection) then using the android client?

globalprotect user hostname lookup from inside lan

I am not able to resolve hostname (mac and Linux only) for users on GPVPN. 

Eg. I am in the Data Center LAN and when I try to ping, nslookup or ssh into a VPN user machine via hostname, the name doesn't resolve at all. 

Same thing works fine when user

Geo location IP problem

Hi,

My name is Anthony, and we are ISP from Montreal, Canada.
It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is s

Global Protect Portal Failures

Our organization has started noticing that every 24 hours (give or take an hour) new connections to our Global Protect VPN service is rejecting new connections to the appliance. We also notice that the portal landing page stops responding and issues

Exclude Video Traffic - Global Protect

Hi there,

We've setup our global protect to exclude all video traffic, using this guide: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways/exclude-video-traff

Global Protect HIP Policies

I would like to configure the HIP Policies which will match the Domain name of Windows Clients, if VPN connections do  not match the HIP policy then VPN Connection should get disconnect with the notification.

Please help me how can we achieve this?