This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Use DHCP relay with GlobalProtect

Hi,I've been doing some research on the option of using DHCP relay on Palo Alto for all the GlobalProtect gateways, and i'ts not clear to me if it's possible or not. The thing is, we want to enable Secure DNS records registration for the GlobalProtect IP network pools, but because currently the Palo Altos are the ones providing the IP, instead o...

MarcelST by • L3 Networker
  • 10366 Views
  • 1 replies
  • 2 Likes

Certificate profile - option Block session if the certificate was not....

Basic GP setup, portal and gateway using certificate authentication only, certificates issues by internal CA, Palo Alto firewall is not involved in the certificate enrollment process. Certificate profile used is configured with Root and intermediate certificate, set for using CRL and options (block session if certificate status cannot be retriev...

Global Protect user inactivity timer

We are trying to figure out how the Global Protect inactivity timer works? We have set the inactivity timer to 3 hours but for some reason we don't see the user session log out after 3 hours of inactivity. Login Lifetime: set for 10 hoursInactivity timeout : 3 hoursDisconnect on idle: 3 hours Any suggestions on how to get this working highly app...

Globalprotect use problem

The customer uses SSLVPN made by a certificate issued by a third-party trust agency. The problems we have now are: Some customers can use domain names or public network IP addresses to log in to sslvpn, but some users can only use domain names to log in to sslvpn, not public IP addresses. Can you help me see the reason?

Resolved! Can't Uninstall GlobalProtect

After a drive failure I cannot uninstall goblaprotect. The failed drive was only used for my applications. So the install directory was lost but my main windows drive is intact so GP is still registered as an application. I have the install msi for GP 5.00 but it cannot repair or remove the existing package.Is there any way other than editing t...

Resolved! GlobalProtect Post Login Banner - SAML

We are currently using SAML w/Cisco's DUO for authentication to our Portal, with the authentication override cookies enabled. I am now being asked if we can display a "Welcome Banner" of sorts to users when they connect to the vpn. the globalprotect portal is only used once, for these users, and only then to download the Agent software. after ...

DonClick by • L0 Member
  • 5699 Views
  • 1 replies
  • 0 Likes

Resolved! Global protect with IPsec

Hello,one of my customer is using global protect with IPsec.when he turn off the internet in his pc,GP disconnects from the machine as expected.but in gateway-remote users , the user is still showing as connected and able to observe the same through gateway connected users in cli.There are no logout events generated in systems logs as well.the t...

snimshad by • L1 Bithead
  • 6271 Views
  • 3 replies
  • 0 Likes

Global Protect Cannot Reconnect When a Proxy is Enabled

Hey PA LIVECommunity! I have a weird issue... Global Protect Fails to Connect after Disconnecting, stating it cannot reach the gateway. However, restarting the computer with the GP Client, and reconnecting it will succeed.We've seen this on a handful of our Windows devices, and it seems to be slowly growing as first we only had four devices with...

Resolved! Allow VPN with and without a cert

HelloIs it possible to have one gateway with two agents, one that uses on-demand with leap user name and password (no cert) and another that uses pre-login with a cert?When I follow the instructions I have to put the cert on the Gateway and when I do, any user without the cert can't connect. Since everyone is at home it's hard to push out a cert...

Resolved! Issues uninstalling GlobalProtect because of missing installation

Hello,I had a working version of the 64 bit Windows version of GlobalProtect installed on my secondary hard drive on my Windows 10 laptop. My hard drive completely failed recently, disappearing from Windows. GlobalProtect still showed up in the Add or Remove programs list but I could not uninstall it as it said there were files missing. I tried ...

GP communication between remote users

One of our help desk analysts working remotely asked why he was unable to use remote administration tools to assist end users also connected to the GP gateway. I'm not able to find a definitive answer in the docs and KB, but I expect this is by design. Can anybody confirm this, and is there a mitigation besides providing support staff with a vir...

global protect ldap users have conflict session accessing private network

Hi All, I have setup global protect authenticated by LDAP. Before i started, here is my running version:- PA Firmware : 8.1.5- GP Version : 5.0.0I found odd issue with global protect ldap authenticated user who accessing the private network. I have logged in global protect with ldap authentication, let's say its "domain\user1". i want to access...

GP Update

I'll kick it off.I will be updating the OS on my firewalls to a version that does not support the version of GP most of my users are running. Current version; PANOS 7.1.19, GP 3.1.1. I Plan to download GP 5.1.1 and use the "Install Transparent" option the get most of my users updated then update the FW to 8.1.13. My question is after i update th...

GFN182 by • L2 Linker
  • 4990 Views
  • 3 replies
  • 0 Likes
  • 1712 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks