Roaming clients

Hi all,

We are looking at replacing our Cisco ASAs VPN concentrators with VM-50 appliance with Threat Prevention and Global Protect.

Currently with Cisco AnyConnect we use Umbrella's roaming client which allows us to filter traffic even if theremote c

Again Modified Username in GP Client after Update

Hi Folks,

A year or so ago we tried to upgrade our Global Protect 5.0.3 to the recent prefered version with the result that many of our users get the chineese / asian letters in username BUG after the Upgrade.

Now we tried again with 5.1.6 and instead

iPhone 11 iOS 14.1 Cert issue for global protect

I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained. 

On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, a

Which is the best "aes 128-cbc" or "aes 256 -gcm"

hi friends,

   I am trying to understand, which is the best among the below 2 IPSec encryptions?

1. "aes 128-cbc"
2. "aes 256 -gcm"

i am looking for opinions based on security and reliability. 

Thanks !!

Make Global Protect portal HTTPS secure

Hi,

we have configured global protect for remote users and its working fine. We have added FQDN on Public dns to access portal and Its also working fine. Now we want make the portal HTTPS secure we have own the certificate but don't know where we have

Global Protect 9.1.3+ Sample Logs

Hello,

Does anyone have a sampling of logs Global Protect they would be willing to share?  I need to verify so formatting of fields, and understand how they look in real life, outside of the format provided on the docs site.

Thank you

NEW Monitor Disconnects GP Whenever Connected

Hello,

I purchased this new monitor, ACER ED323QUR.

Whenever I connect my Macbook Pro, MacBook Pro (15-inch, 2019), to it, Global Protect disconnects. Then the internet will cut out altogether.

I use an Amazon-branded USB-C to HDMI cable, which works

GP Welcome Page Pop-Up Placement

Hi,

We have a number of GP users operating clients running 4.07 and some using version 5.x.  There is an odd (Annoying) issue that those running the later versions of GP have noticed and its to do with the pop-up placement of the Welcome Screen.  In

GP Upgrade issues

Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to r

HIP Checks / 3rd Party Clients

I have a customer who is looking to enforce HIP checks to allow traffic.

However, some of their users are connecting in with non Palo Alto clients, and thus HIP checks do not work.

Is there a way to block non-GP clients from connecting completely?  C

GlobalProtect VPN SSL - disconnect

Hello,

I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed"

PAN-OS 9.0.7

GP Agent : 5.0.8

Before updating the agent or swit

Traffic Steering

Can traffic steering be used in a Panorama managed Prisma Access deployment to route traffic to certain public websites (like YouTube) through our internal Palo Alto firewall? The documentation on this feature was slim.

Multiple Global Protect Portal Realms

Hi,

We have a Global Protect portal available to our users via a public facing URL.  Question I have is whether the Palo Alto solution can support multiple portals based on the same URL and interface IP to serve different authentication profiles.  Ex

Global Protect Configuration during client installation

Hello.  Is there a way to install the Global Protect configuration during the installation?  Our PC imaging process installs GP and also  adds the portal address but the configuration is not there until a user logs into the PC and then signs into Glo