This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Can password expiry warning from AD be shown as pop-up via GlobalProtect?

Hi, is it possible for end-users to get pop-up of password expiry warning from AD via GlobalProtect? and how to set up that?in current setup of GlobalProtect, I have; - on-demand method - LDAP Authenticationand users daily connect GlobalProtect by on-demand method and access to internal resources. I am now trying to newly set up GPO in AD to ena...

Daily VPN Users

The "Daily VPN Users" report appears a "source User" & "Bytes", always I have a "Bytes" different usage daily for unknown user, it's line appears with no data in "source User".

Is there a feature to map specific mac address to specific user in GP VPN

Hi Team, I have a situation where users a should not be able to login to user b machine as the same goes to user b as well.Is there a way to map the HIP profile to a specific user like mapping the specific mac address to a specific user so that the mentioned user alone gets logged in to that specific system or machine.Kindly share any documents ...

Can Palo Alto Firewall intergrate with Mobile Device Manager Plus (ManageEngine MDM) to control the remote access vpn devices?

Our customer wants to control the remote access VPN devices in order for the devices that were enrolled in MDM Plus can be able to access the company via Global Protect. So, is Palo Alto Firewall possible to integrate with Mobile Device Manager Plus (ManageEngine MDM) to solve this problem?

TTNhan by • L2 Linker
  • 2576 Views
  • 0 replies
  • 0 Likes

Resolved! GlobalProtect Clienless VPN Feature fo Apps Tunneling

Hi Folks, In another platform, when we use webvpn/clientless, we can do application tunneling. Basically It allows users to use their own application installed on their devices like putty, smartconsole(chekcpoint) to access internal resources.Is this scenarion possible on paloalto clientless vpn ? Thank you for the answer. Regards,Adam

Separating users in saml authentication via okta

Hello.We are configuring to run gp by authenticating with okta and saml. There is no difficulty in using gp with authentication, but there is one problem. I plan to allocate an ip pool for each user, but gp gateway cannot allocate an ip pool for each user, and access is possible only when the source user is all. The log records the user id exact...

jskang by • L1 Bithead
  • 2141 Views
  • 0 replies
  • 0 Likes

Avoid GP Portal to forward user name to external gateway

Hi everyone, I bumped into a rather annoying issue with Global Protect. Context: We needed and external authentication source for MFA with our Global Protect deployment, so we set up OKTA SSO (with SAML) for our Global Protect Portal. In order to Group mapping to work with the external Okta directory, we needed to set up an LDAP profile, config...

Linux client wayland support (icons, statusbar) and packages for different Linux distributions

Greetings Palo Alto!I'm having PA Globalconnect at work and, to be fair, the official client is so bad that I have to use opensource compatible version "openconnect". Sometimes this is not recommended by companies; so:1) Please make the Wayland tray icon support as well as fully good-quality CLI support (neither of these are available at any of ...

GlobalProtect - "Refresh Connection" API call via DLL/etc

Is there an API or any documentation on how to call the GlobalProtect "Refresh Connection" function from external code? I want to be able to call this function from custom external code. The reason why is to fix a connection issue we are having through automation since we don't want to have to ask users to manually click that option. If no exte...

AAT by • L1 Bithead
  • 16873 Views
  • 17 replies
  • 0 Likes

Resolved! Global Protect Not Installing Virtual Network Driver

Host OS is Windows 10 Pro ARM Build 21354Global Protect 64-Bit Windows 10 v 5.2.1-9 Installation appears to be successful, but GP fails to connect to portal. An Intel install shows a PAN GP Virtual Ethernet driver install under Network adapters in Device ManagerThis driver does not appear in the ARM install. Similarly, the Intel install has pang...

Resolved! Single Portal with Multiple Gateway without GSLB | What happen when the Portal is down ?

Hi Folks, I have PaloaltoFirewall on DC and DRC, and we are going to configure GlobalProtect for SSLVPN.I understand that we can configure multiple gateway on the Portal, so that when one gateway is down it can failover to the next available gateway.Let say i configure the Paloalto on DC as the Portal. And the Gateway consist of Paloalto DC (hig...

Global Protect 5.2.6-87 Not able to see all folders on DFS file shares

We have some users who cannot see and processes cannot access some of their folders on a DFS file share when they are on the GP VPN, but they can see them when they revert to our previous VPN (we are just rolling out GP now). They do not have offline files enabled. Other users have no problem seeing folders on GP. I searched Known Issues, but ...

Global Protect PANGP Virtual Ethernet Adapter disabled after Jun21 MS Security patches. (KB5003974 suspected)

Starting after Microsoft Cumulative and Security updates released in June 2021, our users have been experiencing issues where they are unable to connect to Global Protect after resuming from a reboot or sleep. The blue "connect" button is present, and our portal is selected, but clicking the button does nothing. The PANGP Virtual Ethernet Adapte...

GP Issue 2.PNG
GP Issue 1.PNG
GP issue 3.PNG

Global Protect does not connect on First attempt

Hi Community, We have few users where GP does not connect on first attempt.User need to try few times to make it work.We are using GP 5.2.5 and PAN OS 9.1.8 Firewall i do no see logs for unsuccessful connection.We are using Pre-logon then on demand. Below are GP logs form user PC P5188-T16948)Debug(3690): 07/15/21 08:44:05:492 REGION-PRIO, gate...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks