GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

GlobalProtect - Autoblock/kick users when vulnerability exploit is detected?

I'm curious if anyone has crafted either a vulnerability profile or security policy that would disconnect or auto-block a user if their a vulnerability exploit is attempted while they are connected via Globalprotect. We've set up event logging that can flag and email my team whenever a user starts displaying malicious or compromised behavior whe...

Mac Built-in Firewall Issue GlobalProtect

Hello everyone, Yesterday I suddenly started experiencing the issue where I connect to GlobalProtect, and then gives an error asking to "Ensure your firewall is on" and to "Ensure your Apple Software Update is installed/enabled". Obviously, I wouldn't write this post if my firewall was off or the software was not updated. All the settings are th...

Weird behavior of Global Protect UI on RHEL

Not quite sure if this was caused by any update but after last reboot I am unable to use UI. It will appear in tray and small window will popup once I click on the icon however it is not possible to do anything more - any click on the interface will make it disappear without performing any actual connection. Did anybody experienced same issue an...

Enable DUO for GlobalProtect

Hello, I am looking into enabling DUO for GlobalProtect. I am aware that DUO and Palo Alto supports three ways to enable MFA: DUO's RADIUS proxy serverDUO Access Gateway (DAG)SAML (e.g., Azure, Okta) I tried all 3 of them, and I am leaning more towards SAML since it's just easier and supports the DUO prompts. I have a few questions and I was ho...

Screen Shot 2021-08-31 at 7.33.36 PM.png
Screen Shot 2021-08-31 at 7.33.54 PM.png
rt_2018 by L0 Member
  • 2279 Views
  • 0 replies
  • 0 Likes

Resolved! GP portal with multiple gateway can automate failover between multiple gateways when highest priority gateway gets down ?

whether GP portal (containing Multiple GP Gateways) can automate enforcement of GP Gateways in the event when primary GP Gateway gets down due to any undesired reason. If the failover between gateways is automatic; without users noticing that they have been disconnected and re-connected to the other gateway >

Global Protect in Thailand

Hello. I'm working from Ukraine from mcbook with Global Protect vpn which is used to access jira etc. I'm considering moving to Thailand for a few months.Can I be sure my vpn will still work properly from Thailand? What are the risks? Can Global protect be banned or restricted in Thailand? Do I need to make any additional arrangements or setting...

Elena89 by L0 Member
  • 3035 Views
  • 2 replies
  • 0 Likes

Implications of "No direct Access to Local Network" toggle in Global protect client settings?

Hey folks. I, like probably a lot of us these days, use Global protect for the major percentage of the company's workforce. I run split tunneling - internal resources go over the tunnel, anything else just uses the local internet. Recently, I have had the need thrown at me the requirement to provide split tunneling for a set of addresses which a...

darren_g by L4 Transporter
  • 5884 Views
  • 4 replies
  • 0 Likes

Configure GlobalProtect VPN Client only for certain domains

Hello there,My name is Federico Iglesias, I have started working for a company that uses GlobalProtect as a VPN client.Sometimes I am having serious problems with the connection speed when the VPN is active.I need to be able to use the VPN for the corporate domains and for the rest of the outgoing connections use my local connection.I have been ...

Global Protect Mac Big Sur 11.5.2 stuck connecting

Just wondering if anyone else is experiencing issues with macOS 11.5.2 and Global Protect stuck on the 'still working' connection screen? Have just set up a load of new MBPs and they're all having the same issue. Global protect 5.2.4-21 installed with system extensions (security preferences, allow Palo Alto etc). Many thanks

MeshUK by L0 Member
  • 2036 Views
  • 0 replies
  • 1 Likes

Global protect gateway error - Invalid cert

The global protect was able to connect to all of the gateways. Since last week the global protect is showing error "The server certificate is invalid. Please contact your IT administrator"However, when i'm switching to a different ISP provider i'm able to connect to the same gateways. Global protect - 5.2.6PAN-OS - 9.1.8

BipinK by L0 Member
  • 5333 Views
  • 2 replies
  • 0 Likes

intermittent disconnect and client probing

Hi, There has been intermittent disconnect on the GlobalProtect VPN connection after upgrading to Windows 10 update 2004.The end user always has to use the Refresh Connection option or signs out of the VPN and reconnect before the connection is restored. Are the any issues with the client probing function being enabled.

Resolved! DHCP address assignment for Global Protect VPN

All, I am working on a PA-220 LAB, in preparation for a PA 820 rollout. I have setup and configured my Global protect VPN. When it comes to DHCP, I know I can't use my DHCP servers but have to rely on DHCP from the firewall. That is OK. My question is this: For my VPN users, If I create a DHCP scope in Network>GatewayS>MyGateway>Agent&g...

RussMc by L1 Bithead
  • 15654 Views
  • 12 replies
  • 0 Likes

Globalprotect: Multiple gateway on the same firewall

Hello good people. We are planning globalprotect redundancy on our PA-3050 with multiple ISP. Here is our scenario: 1 Portal1 Gateway What we wanna do: 1 Portal 2 Gateway our existing gateway is going through tunnel mode via tunnel.1what I want to know is that, can I run my second gateway via the same tunnel tunnel.1? or Do i need to create a n...

Resolved! Is it possible to share which Globalprotect VPN address was assigned to which user/real client ip address to other systems?

Hello to All, I am interested if Palo Alto is used as the Globalprotect VPN solution but after it there are other systems that may benefit from user group policies, howcan this be done? The issue is that the after the VPN the customer will be seen with the VPN ip address and not the original ip address, so I don't think that the Active director...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels