GlobalProtect Discussions

Client vs Clientless for Web Application

For a browser based web application over a cellular connection, would the Clientless VPN be any more reliable (connection) then using the android client?

globalprotect user hostname lookup from inside lan

I am not able to resolve hostname (mac and Linux only) for users on GPVPN. 

Eg. I am in the Data Center LAN and when I try to ping, nslookup or ssh into a VPN user machine via hostname, the name doesn't resolve at all. 

Same thing works fine when user

Geo location IP problem

Hi,

My name is Anthony, and we are ISP from Montreal, Canada.
It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is s

Global Protect Portal Failures

Our organization has started noticing that every 24 hours (give or take an hour) new connections to our Global Protect VPN service is rejecting new connections to the appliance. We also notice that the portal landing page stops responding and issues

Exclude Video Traffic - Global Protect

Hi there,

We've setup our global protect to exclude all video traffic, using this guide: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways/exclude-video-traff

Global Protect HIP Policies

I would like to configure the HIP Policies which will match the Domain name of Windows Clients, if VPN connections do  not match the HIP policy then VPN Connection should get disconnect with the notification.

Please help me how can we achieve this?

I got an error while uninstalling GlobalProtect

hi, all 

I had a working version of the 64 bit Windows version of GlobalProtect installed on my secondary hard drive on my Windows 10 laptop. My hard drive completely failed recently, disappearing from Windows. GlobalProtect still showed up in the Ad

GlobalProtect upgrades & issues on DHCP option 43 code

Hello All,

Since last year, we are using GlobalProtect 5.0.4 along with DHCP options 43 to detect the Internal GP GW FQDN. The GP client then connects to the branch office GP GW and pushes the User-ID - as it should.

Since I updated our main PA 5520

Local Printing Non-Split Tunnel

Does any know if it possible to allow access to local network printing when you have Global Protect setup to route everything over the tunnel ("No direct access to local network" option enabled).  I've been looking at the Exclusion section and see op

certificate format from CA to clients and GP

Hello Team

Our GP is running with users authenticating via AD account

Now we are rolling out Machine certificate via Group Policy from our Microsoft CA server to all the Domain clients

and then the goal is to enable certificate check in addition to A

Documentation on Global Protect

Hello,

I'm looking for documentation about Global Protect. The default help pages only summarize the menu options in the gui. Typically they contain no explanation about its context or purpose.

Examples of things I really can't intuitively find about