GlobalProtect gateway limit

We have a pair of PA-850 firewalls, and we are running into an error when pushing configuration from Panorama that contains 7 GP gateways (6 external and 1 internal), and 6 portals.

. global-protect -> global-protect-gateway -> GlobalProtect AlwaysOn

MFA and Windows Store app

My company has allowed the use of the Windows Store app for the past few years and it has been very handy for deployments. We are  moving to MFA for VPN in the near future. Just wondering if the Windows store app will ever support that  or if we need

creating split tunnel on full tunnel enforcement

Hi

We’ve recently discovered that the Mac GlobalProtect client does not terminate existing network connections after full tunnel with no access to local network is established. This is reproducible In the following procedure:

1. Disconnect from VPN
2. Connec

Multiple Class C addresses PA setup

I’m configuring a PA3220 for three external class C addresses we own (192.168.10.0/24, 192.168.11.0/24, and 192.168.14.0/24). We have two ISP Internet connections on two different campuses. We are using trunking to carry the different VLANs, so the o

Send Logs from GlobalProtect App on iOS managed via Intune

Does anyone else have issues on iOS sending logs from the GlobalProtect client to email when the device is managed via Intune?

We manage our devices via Intune and use the MS Outlook app for email.  We are having an issue with the GlobalProtect app a

Pre Logon then on Demand traffic flow

Hi Community,

We have GP prelogon then on demand.

For pre logon we are using machine cert for authentication.

For on demand we are using SAML MFA.

I see that prelogon works fine for few users but one they logon to PC and click on connect they get erro

Does GP VPN Client store Session Data on client software

This is regarding whether VPN Client store any session related information over the client software.

Kindly find below comment that needs to be noted.

"Check if the VPN software writes session data to the remote workstation's disk. If possible, use a

Retain Connection on Smart Card Removal behavior on GP

Hello,

There are Smart Cards being used for the GP authentication. One of the options for Windows endpoints is to disconnect the GP as soon as Smart Card is removed and that was tested, option in the app settings: "Retain Connection on Smart Card Rem

GlobalProtect IPv6 on tunnel adapter

Hi Community,

since the Covid situation, we went in a fast rollout regarding GlobalProtect and got a prelogon always on setup running - so far so good. As we enabled the users, wo work from home, we experienced lot's of issues regarding name resoluti

Custom Logo on Global Protect Software

Hi All,

Is it possible to customize/change the logo on the GP Client software.

Thanks in advance.

HP Remote Graphics Software freeze when accessing via global protect to internal network

Hi,

Have anyone experiencing performance degradation when using remote graphic software with global protect ?

During pandemic, our user using global protect then accessing their office computer with HP remote graphic software (RGS) and RDP.

we have is

Network Extensions crash macOS

Hi,

I'm trying to split tunnel some GlobalProtect traffic.  Using macOS (catalina) I've tried multiple versions of GP but I'm currently running 5.2.7.  Upon logging into GP, I get the prompt "GlobalProtect would like to add VPN configurations.  All n

global protect clientless using guacamole

Hi all,

Start working with global protect using MFA and try using guacamole for proxy rdp connection.

after building the guacamole server (updated one using Guacamole 1.1 on Ubuntu 20.04) the server is working on the internal network but when accessing

Radius Auth Profile with PEAP-MsCHAPv2

Has anyone successfully integrated Radius Auth profile PEAP-MsCHAPv2 with NPS or any other Radius platform?

I have configured my Radius Auth Profile and attached relevant Cert profile to it as per below knowledgebase article.

https://knowledgebase.pal