This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GP Upgrade issues

Our environment seeing a weird issue when upgrading the GP Client, only happens so far on about 10% of the machines (small group) but its quite a pain because everyone is remote so we have to use Zoom to fix it and give them local admin/password to repair the app (No UAC prompt in Zoom). The issue is after what looks like a successful upgrade th...

antha124 by • L0 Member
  • 2713 Views
  • 1 replies
  • 0 Likes

HIP Checks / 3rd Party Clients

I have a customer who is looking to enforce HIP checks to allow traffic. However, some of their users are connecting in with non Palo Alto clients, and thus HIP checks do not work. Is there a way to block non-GP clients from connecting completely? Cant figure out how to do this. There doesn't seem to be any check to determine which client a us...

GlobalProtect VPN SSL - disconnect

Hello, I have a customer that many of his VPN SSL clients are disconnected many times during the day. In the GP logs (pan_gp_event.log) I can found : "Tunnel is down due to socket closed" PAN-OS 9.0.7GP Agent : 5.0.8 Before updating the agent or switching to IPsec, Is there a VPN SSL "mode" BUG in that specific OS/Agent version ?

Traffic Steering

Can traffic steering be used in a Panorama managed Prisma Access deployment to route traffic to certain public websites (like YouTube) through our internal Palo Alto firewall? The documentation on this feature was slim.

Multiple Global Protect Portal Realms

Hi, We have a Global Protect portal available to our users via a public facing URL. Question I have is whether the Palo Alto solution can support multiple portals based on the same URL and interface IP to serve different authentication profiles. Example:All users using the GP Client for connection: Group of Users (A): Connect to companya.com ...

MHaran by • L1 Bithead
  • 2365 Views
  • 0 replies
  • 0 Likes

Global Protect Configuration during client installation

Hello. Is there a way to install the Global Protect configuration during the installation? Our PC imaging process installs GP and also adds the portal address but the configuration is not there until a user logs into the PC and then signs into Global Protect. We are trying to have a remote user be able to sign into their newly imaged device ...

Two Phase VPN

Hello, I have a question regarding the possibility of a 2 phase VPN connection. Please see below for a description of the scenario. User A logs in to global protecting when logging on to their PC. I have this part completed using User logon (Always on). This log on allows basic VPN connectivity to make sure their machine is patched/AV updated, e...

RJenkins by • L0 Member
  • 1918 Views
  • 0 replies
  • 0 Likes

Resolved! Chinese characters are populating automatically in GP username logging fiel

I am having experience in the global protect agent login window when the user starts logging from the machine. Chinese characters are populating automatically in the GP agent username logging field window, and users have to clear the character to enter their username logging into GP.And this issue came after the upgrade of the Palo Alto global p...

GP.JPG

Globalprotect Clientless VPN and VClient Certificate

Hi All, I have recently configured a clientless vpn for a customer but the solution needs client certificates for the users to log in with a browser. Is there a way I can make this an authentication only solution with no client certificate requirement? The GlobalProtect configuration is configured and working for staff members using PreLogon suc...

a.jones by • L3 Networker
  • 3050 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect error after upgrading

Hi, Have some users after upgrading to GP 5.1.6 that are getting this error. Has anyone come across this? I've seen it with other DLLs before, but not this specific one. GP seems to be working fine, despite the error The code execution cannot proceed because PsvCtrl.dll was not found. Reinstalling the program may fix this problem Trying to d...

MikeC by • L3 Networker
  • 3162 Views
  • 1 replies
  • 0 Likes

Something about Global Protect agent seems off

It looks like Global Protect is a hot issue and specifically in combination with prelogon functionality.We're also having a situation that appears to difficult to explain. The idea is:When handing out devices with global protect preinstalled and preconfigured in the windows registry.A receiving user who has never logged into that device should b...

globalprotect user hostname lookup from inside lan

I am not able to resolve hostname (mac and Linux only) for users on GPVPN. Eg. I am in the Data Center LAN and when I try to ping, nslookup or ssh into a VPN user machine via hostname, the name doesn't resolve at all. Same thing works fine when user switch connection from GP to Cisco Anyconnect. The only difference that I can see when on Cisco i...

rKarki by • L1 Bithead
  • 2211 Views
  • 0 replies
  • 0 Likes

Geo location IP problem

Hi,My name is Anthony, and we are ISP from Montreal, Canada.It came to my attention that our IP Subnet: 149.115.208.0/20 according to paloalto geo database appears as it is located in USA, whereas ARIN, NIC, maxmind and others state correctly it is situated in Quebec, Canada .This is problematic for us, in times of Covid19, cause many of our cus...

Anthony by • L0 Member
  • 2817 Views
  • 1 replies
  • 0 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks