Gateway side not seeing Satellite published subnet

I've just set up a PA-850 as a satellite to my main 3050 and the connection seems good. All the subnets published by the Gateway can be seen by systems on the Satellite side. However, the subnet being published by the Satellite can't be seen on the G

Allow traffic to specified FQDN enforce globalprotect for network access?

Has anyone tried using this?   Wondering how it works, and if it is an "and" or an "or"  if you specify IP's in the "allow traffic to specified IP's when enforce globaprotect for network access is enabled.   

I'm trying to get users out to something

Users are randomly dropping IPSEC and establishing SSL connection

Users are randomly dropping their working IPSEC GP connection and switching to SSL.  Is this somewhat normal operation of UDP across the internet?   Is there any hidden timeout/handshake variables that can be set to allow the IPSEC not to drop so fas

GlobalProtect could not connect - socket error 10047

Hi,

I got two computers that have installed agent GP 5072 and are connected to the same home network. The first one with win10 has no issues in connecting. The second one mounts win7 and its connection always fails with error "Could not connect to the

GlobalProtect User REport

hi everyone ,

i need help with small issue, is there any way to find list of users that never connect ?

i can generate report for last login , but if the user never connect it will not show.

when corona started we created users for all employes (local u

SAML with ADFS and GP

Hi Everyone

We are currently using GP with LDAP as an authentication method. This works like charm.

Now, we want to start using the AZURE MFA option that we have configured on our ADFS servers.
I’ve managed to setup the SAML between the ADFS servers (20

Prelogon PC not showing in Gateway Remote Users

I'm trying to set-up GlobalProtect PreLogon using this guide: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEYCA0

It only seems to be working if I logon to the PC and sign in with an account. If I logout the connection i

GlobalProtect intrazone access

Is it possible to create a rule to allow certain intrazone traffic for GlobalProtect clients. E.g. so that client1 on GP can ping client2s GP interface. I tried creating a specific rule that would allow traffic from GlobalProtect security zone to Glo

Glass magnifier detail info needed for HIP Match, Log Detail

Hi, I am looking to see if there is a way to export or report the details info that glass magnifier provides when click on HIP Match, Log Detail in the glass magnifier column. The HIP Match columns do provide basic info such as: pc name, user name, d