This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Again Modified Username in GP Client after Update

Hi Folks,A year or so ago we tried to upgrade our Global Protect 5.0.3 to the recent prefered version with the result that many of our users get the chineese / asian letters in username BUG after the Upgrade.Now we tried again with 5.1.6 and instead of Chineese Letters we get four QuestionsMarks for the Username after the Update. I realy get ann...

2020-10-08 21_06_50-Windows 10 Pool 1.png

iPhone 11 iOS 14.1 Cert issue for global protect

I have been trying to get this to work for days not and I am not getting anywhere. I always seem to struggle with certs due to how they are chained. On my Palo I have a rootca (self-signed, certificate authority), intermediateca (issued by rootca, and also certificate authority), then I cut a cert called gp-cert (issued by intermediateca, non c...

Make Global Protect portal HTTPS secure

Hi,we have configured global protect for remote users and its working fine. We have added FQDN on Public dns to access portal and Its also working fine. Now we want make the portal HTTPS secure we have own the certificate but don't know where we have to configure. Can anyone please help me to resolve it. Snap of the issue has attached.

Global Protect 9.1.3+ Sample Logs

Hello, Does anyone have a sampling of logs Global Protect they would be willing to share? I need to verify so formatting of fields, and understand how they look in real life, outside of the format provided on the docs site. Thank you

nick_c by • L0 Member
  • 1840 Views
  • 0 replies
  • 0 Likes

NEW Monitor Disconnects GP Whenever Connected

Hello, I purchased this new monitor, ACER ED323QUR. Whenever I connect my Macbook Pro, MacBook Pro (15-inch, 2019), to it, Global Protect disconnects. Then the internet will cut out altogether. I use an Amazon-branded USB-C to HDMI cable, which works on other displays without issue. My work's corporate IT representative had no answers. I've look...

ultraed by • L0 Member
  • 2442 Views
  • 0 replies
  • 0 Likes

GP Welcome Page Pop-Up Placement

Hi, We have a number of GP users operating clients running 4.07 and some using version 5.x. There is an odd (Annoying) issue that those running the later versions of GP have noticed and its to do with the pop-up placement of the Welcome Screen. In 4.07 the Welcome screen appears after the authentication has been successful with the GP gateway....

MHaran by • L1 Bithead
  • 5355 Views
  • 3 replies
  • 1 Likes

Resolved! Global Protect Pre-Logon conflicting with User-ID agent

We are trying to deploy pre-logon, we have security policies around pre-logon users, and then security policies for actual users once they authenticate. Basically, an initial pre-logon rule that allows access to domain controllers, etc., followed by a pre-logon deny all rule, followed by rules for users that have fully authenticated to GP. All...

buck1 by • L1 Bithead
  • 6506 Views
  • 3 replies
  • 0 Likes

GP Upgrade issues

Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to repair the app (No UAC prompt in Zoom). The issue is after what looks like a successful upgrade th...

antha124 by • L0 Member
  • 2696 Views
  • 1 replies
  • 0 Likes

HIP Checks / 3rd Party Clients

I have a customer who is looking to enforce HIP checks to allow traffic. However, some of their users are connecting in with non Palo Alto clients, and thus HIP checks do not work. Is there a way to block non-GP clients from connecting completely? Cant figure out how to do this. There doesn't seem to be any check to determine which client a us...

GlobalProtect VPN SSL - disconnect

Hello, I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed" PAN-OS 9.0.7GP Agent : 5.0.8 Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?

Traffic Steering

Can traffic steering be used in a Panorama managed Prisma Access deployment to route traffic to certain public websites (like YouTube) through our internal Palo Alto firewall? The documentation on this feature was slim.

Multiple Global Protect Portal Realms

Hi, We have a Global Protect portal available to our users via a public facing URL. Question I have is whether the Palo Alto solution can support multiple portals based on the same URL and interface IP to serve different authentication profiles. Example:All users using the GP Client for connection: Group of Users (A): Connect to companya.com ...

MHaran by • L1 Bithead
  • 2354 Views
  • 0 replies
  • 0 Likes

Global Protect Configuration during client installation

Hello. Is there a way to install the Global Protect configuration during the installation? Our PC imaging process installs GP and also adds the portal address but the configuration is not there until a user logs into the PC and then signs into Global Protect. We are trying to have a remote user be able to sign into their newly imaged device ...

Two Phase VPN

Hello, I have a question regarding the possibility of a 2 phase VPN connection. Please see below for a description of the scenario. User A logs in to global protecting when logging on to their PC. I have this part completed using User logon (Always on). This log on allows basic VPN connectivity to make sure their machine is patched/AV updated, e...

RJenkins by • L0 Member
  • 1902 Views
  • 0 replies
  • 0 Likes
  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks