Global Protect SCEP Certificate Username Format

We have SCEP configured and working with our internal PKI.  The connection works, except the user certificates get assigned to username%40domain.com instead of username@domain.com.

The Variable is set to CN=$USERNAME.  It seems like its getting conve

Global Protect Prelogon not working

Scenario is we recieve new laptop with pre loded certs. I want that laptop to get connected to globalprotect gateway using pre-logon once it has IP it will get connectivity with DC and later it gets renamed to user name we login.

I am working on above

Gateway side not seeing Satellite published subnet

I've just set up a PA-850 as a satellite to my main 3050 and the connection seems good. All the subnets published by the Gateway can be seen by systems on the Satellite side. However, the subnet being published by the Satellite can't be seen on the G

When saving files over the VPN the duplicate

Hi All,

We upgraded our VPN to v5.1.5-20 and now a couple of our users are experiencing issues where they open a file and go to save the file but it saves as a new file creating duplicates. It only happened with a small bunch of users so far, I've tr

Multigateway config

Hello community,

I'm using this article to configure multigateways on global protect:

https://docs.paloaltonetworks.com/globalprotect/8-0/globalprotect-admin/globalprotect-quick-configs/globalprotect-multiple-gateway-configuration

I've followed it but

Allow traffic to specified FQDN enforce globalprotect for network access?

Has anyone tried using this?   Wondering how it works, and if it is an "and" or an "or"  if you specify IP's in the "allow traffic to specified IP's when enforce globaprotect for network access is enabled.   

I'm trying to get users out to something

Users are randomly dropping IPSEC and establishing SSL connection

Users are randomly dropping their working IPSEC GP connection and switching to SSL.  Is this somewhat normal operation of UDP across the internet?   Is there any hidden timeout/handshake variables that can be set to allow the IPSEC not to drop so fas

GlobalProtect could not connect - socket error 10047

Hi,

I got two computers that have installed agent GP 5072 and are connected to the same home network. The first one with win10 has no issues in connecting. The second one mounts win7 and its connection always fails with error "Could not connect to the

Frequent disconnects 15-20mins

Hello All,

I have 1 particular user who is experiencing frequent network loss. Any ideas on what might be the cause. We have tried using his LAN and also mobile hotpot but the same issues prevails. the and excerpt from his logs shows:

 07/07/20 09:07