GlobalProtect Discussions

GlobalProtect adding machine cert authentication

Hi,

We are currently using GlobalProtect with an auth profile that uses LDAP and DUO proxy. We now want to expand this setup with needing a machine certificate to be allowed to log on to portal/gateway so only company owned computers can log in.

We c

Piggyback off Shibboleth SP for GlobalProtect portal/gateway Authentication

Hello,

We have a shibboleth SP setup on our web server which has a discovery service built-in, so that users can authenticate against a number of different endpoints. Is there any way to carry over that configuration to a palo alto SAML authenticatio

Global Protect Portal Configuration with ISP DHCP

Hi!

I'm trying to set up Global Protect but the ISP gives us a DHCP address. Is there a way to set this up with a DHCP address?

Global Protect Release Notes link leads to blank page

Any one else having this issue? The last three notifications I've received regarding a new version of Global Protect leads to a blank web page.

Global Protect Report to show active user

Global Protect usage is increasing.

i would like to know how to get a report about active user every day.

1) report about maximum active user every day about 1 week.

2) report about username login today.

3) report about number of OS version  every day ab

Linux CLI globalprotect connect. Error: No Network Connectivity

I am trying to connect to my university's VPN. I have installed the CLI version of globalprotect on my laptop running Arch Linux. The university pointed me to a location to download a tarball with 5.1.1.0-17 debian packages. I believe I have successf

Random UDP 137 to Public IP's after connecting global protect

After installing and connecting to Global Protect, FW policy logs are showing large amounts of UDP 137 getting blocking from Global Protect clients going to many random Public IP's.  Any idea what would cause this?  Public IP's have been MS, AWS, Goo

Issuing DHCP IPs for GlobalProtect users

Hello Guys,

As the title suggests is it possible to issue DHCP IPs for GlobalProtect users? We are expecting to issue GP IP addresses from the Active Directory. Is this scenario possible?

Split tunneling based on the domain is not working.

Split tunneling based on the domain is not working. We need to monitor our user's web traffic while they are on roaming. While users need to connect GlobalProtect and Cisco Any connects simultaneously, some traffic should go via Cisco Any connects an

Global Protect Portal and weak cipher sets

Has anyone had success getting past a B on ssllabs for the globalprotect web portal.

i have created the below ssl profile and bound it to the global protect portal. even though enc-algo-aes-128-cbc and
enc-algo-aes-128-gcm are set to know, they still

SSL VPN event logging...

Does the Global Protect functionality produce logs that can be then forwarded to a remote syslog server?

GlobalProtect disconnect when remote machine display turns off

Hello,

I am experiencing disconnects from a vendor GlobalProtect VPN on a remote machine when I close local RDP sessions to the remote machine. This issue is preventing automated jobs from running properly unless someone is RDPed into the machine. I

Global Protect SCEP Certificate Username Format

We have SCEP configured and working with our internal PKI.  The connection works, except the user certificates get assigned to username%40domain.com instead of username@domain.com.

The Variable is set to CN=$USERNAME.  It seems like its getting conve