GlobalProtect SSL vs IPSec

Help me come to grips with this. I recently enabled IPSec on our PAN for end user VPN's. I did it primarily to hopefully get improved VoIP performance, less jitter, and perhaps a marginal speed improvement. What I have found is an almost across the b

IP Pool – TTL when IP is allocated?

I’ve been trying to find documentation on this.

Can anyone enlighten me, when I connect to Global Protect, am I allocated that IP for x period of time?

I can see a ttl value via the cli, not able to find documentation to understand the exact behavior

GlobalProtect causing intermittent vanishing CMD Windows on Win10

I've looked for the source of this for months and I believe I've narrowed it down to GlobalProtect. Upon rebooting, only once a connection to PanGP has been established, will a CMD window appear on my main screen, vanishing almost immediately afterwa

5.2.5 Big Sur

When I install Sophos Home Anti-Virus,  Big Sur and Global Protect 5.2.5 it fails the compliance check

GP is checking for current anti-virus definitions and real-time protection is on.  Everything is fine there.

Doesn't appear to work until I click on

Global protect split tunnel

Hi guys,

How do i know if traffic is going through my local network as i enabled split tunnel and excluded *.youtube.com and *.netflix.com.

I attached the cli output of the session also.

Thanks

Global Protect won't connect using my Ethernet cable

Hi,

My employer has recently changed their VPN and are now using Global Protect.

I was given the installation software to install Global Protect version 5.2.2-4 onto my home PC (Windows 10).

Windows specifications

Edition: Windows 10 Pro

Version: 20H2

O

Can i do Multiple user VPN and different policy to access Via VPN by global protect ?

Dear All

I have Palo alto FW use function VPN .So my customer would like to do policy for VPN

like 

User A VPN to Palo Fw just access to zone internal

User B VPN to Palo FW can access to zone DMZ only

User C VPN to Palo FW can access to All zone 

this time

server certificate is invalid on chromebooks and phones

So for about the last month (just before xmas) we seem to be having certificate errors for our wildcard cert. Its a wildcard purchased from instantSSL. (sectigo) when using it with global protect client.

It works fine on windows machines. Just seems

Morphisec Unified threat prevention not recognized by Global Protect HIP

Hi Team,

We have noticed an issue that, in Host Information logs on Global Protect the GP Agent is not fetching the "Morphisec Unified threat prevention" Anti-Malware software that was installed on the Client Machine. 

Herewith, i have listed the Sof

Connect Before Logon - Network Sign Option Not Available

We are stuck with Network Sign option not getting visible on Windows logon after installing GP Client ver 5.2.5.

We expected the GP ver 5.2.x and above to create registry automatically as mentioned in following URL. Unfortunately , they are not gettin

split DNS

Hello

We need to test MS-Teams. hence I did a few tests with split DNS. The published manuals (e.g. https://live.paloaltonetworks.com/t5/general-articles/globalprotect-optimizing-office-365-traffic/ta-p/319669) are fine, as long as the VPN gateway is

GP connect before logon .

Has anyone configured connect before logon .Would need steps to configure this .I have a few queries as well .Do we need pre-logon user agent config for this or no ? The registry values found in this document are not exact to what i see on windows .A

GlobalProtect with Azure MFA setup

Has anyone had any luck setting up MFA on the Palo Alto with Global Protect with Microsoft Azure MFA (Hybrid) I tried opening a ticket with the support team and they said they had no clue how to setup but could support it if broken and told me a "Sal