HI,I am trying find out the best method to proactively monitor the health of GP gateways. Basically I would like to make sure that Gateway is healthy and can take user connections. Thanks
We have configured a clientless application on PA. It s working fine it's taking to the application, Following the Home page and other contents are accessing but from there we not able to open few the popup menu tabs from the application. Application is based on IP, not URL base. please find the details with Clientless VPN.https://XXX.XX.X.XX/ht...
We run a Solarwinds script to count panGPGWUtilizationActiveTunnels from each of our active gateways (2 different firewalls). Currently we have 900 Global Protect clients installed, but there are 1,355 active tunnels due to the fact that we use Always-On with a Login Lifetime of 5 days. Essentially, if a user connects to gateway A, then discon...
Hi all expert, Would like to know why whenever I disconnect my GlobalProtect and my local network (wifi or Ethernet) will not auto reconnect.Is there anything need to configure on client or remote gateway? My GP version is 5.0.4-16 Thanks in advance.
Hello, I have downloaded and updated PA firewall to the latest 5.1.3 version from 4.1.3 and activated. However when i click on GP client to "Check for Updates" it states that i am on the latest version. And the update doesnt prompt. Even when i go to our VPN portal and installl again, its the older 4.1.3 version. Should this be instantaneous or ...
Hello All, We have had a more or less stable GP environment during this pandemic. About a week ago, we started receiving calls of clients not able to connect - the GP agent stuck in the connecting state. We had recently enabled split tunneling for just a couple Microsoft networks to support teams and backed that out but at still receiving calls...
Hello, Here are rare trouble. I just configured a new VPN Portal and GlobalProtect inside PaloAlto 3220 FW. I can perfectly connect using Android devices without GP client (Direct on Android VPN config) but I can't connect using a windows machine with GlobalProtect Client. Test made on Windows: 1.- I can connect to the Portal (Internet Browser) ...
We currently have GP configured as connect on demand and currently have both an internal and external gateway. I'm finding that several of our users are connecting to GlobalProtect even when they are in the office, which is causing extra overhead and perceived slowness as their Internet traffic is piped out through our corporate data center. In...
Hi,I've been doing some research on the option of using DHCP relay on Palo Alto for all the GlobalProtect gateways, and i'ts not clear to me if it's possible or not. The thing is, we want to enable Secure DNS records registration for the GlobalProtect IP network pools, but because currently the Palo Altos are the ones providing the IP, instead o...
Basic GP setup, portal and gateway using certificate authentication only, certificates issues by internal CA, Palo Alto firewall is not involved in the certificate enrollment process. Certificate profile used is configured with Root and intermediate certificate, set for using CRL and options (block session if certificate status cannot be retriev...
We are trying to figure out how the Global Protect inactivity timer works? We have set the inactivity timer to 3 hours but for some reason we don't see the user session log out after 3 hours of inactivity. Login Lifetime: set for 10 hoursInactivity timeout : 3 hoursDisconnect on idle: 3 hours Any suggestions on how to get this working highly app...
The customer uses SSLVPN made by a certificate issued by a third-party trust agency. The problems we have now are: Some customers can use domain names or public network IP addresses to log in to sslvpn, but some users can only use domain names to log in to sslvpn, not public IP addresses. Can you help me see the reason?
Dear All,i have a problem with Global Protect page, after enter user name and password it shows This page isn’t working is currently unable to handle this request. is there any idea
After a drive failure I cannot uninstall goblaprotect. The failed drive was only used for my applications. So the install directory was lost but my main windows drive is intact so GP is still registered as an application. I have the install msi for GP 5.00 but it cannot repair or remove the existing package.Is there any way other than editing t...
We are currently using SAML w/Cisco's DUO for authentication to our Portal, with the authentication override cookies enabled. I am now being asked if we can display a "Welcome Banner" of sorts to users when they connect to the vpn. the globalprotect portal is only used once, for these users, and only then to download the Agent software. after ...
BPry
on:
Global protect with LOOPBACK Interface
reaper
on:
GlobalProtect Mac Client ENDLESS POPUPS that TAKE FOCUS from other apps
BPry
on:
Semi-Disable Global Protect on Mac
