This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect Authentication Questions

Hi, I'm going to setup Global Protect in our environment but have some questions before I configure it. 1. Can both a client certificate & SAML be used in conjunction for authentication? If not, would an internal RADIUS server make the most sense for secondary authentication? I want to use the client certificate to control device-ba...

Configure GlobalProtect to Facilitate Multi-Factor Authentication Notifications

I am trying to upgrade the GP username/password login to an MFA login. The username/password login is now working correctly. I am using a local database to authenticate users. I followed the instructions https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/authentication/configure-globalprotect-to-facilitate-multi-factor-authe...

Situation with PA-5250s and Global Protect connections

Specific situation we're dealing with, looking to see if anybody else has and has any input. Over the past few years we have worked a Global Protect build and deployment in our org. We opted to use PA-5250s solely on the basis that they documentation claims that model supports 30k GlobalProtect connections (IPsec AND SSL specifically).In our con...

Connection Failed GlobalProtect on a Mac

I am having an issue logging into the VPN on my Apple devices. I can connect to the VPN via the windows laptop, but I cannot on my Apple laptop. I keep receiving this error message on the Macbook Pro "[Error]: Gateway VPN External Gateway: The network connection is unreachable, or the gateway is unresponsive. Check the network connection and rec...

Resolved! GP User-logon (Always On) doesn't connect

We are preparing configuration of GP for Windows based terminals which need to connect automatically when Windows AutoLogon happens. But in most cases GP remains disconnected because it tries to connect too early when network isn't fully connected yet. If I click on Connect it connects immediately. But of course this isn't an option, Any ideas h...

santonic by • L6 Presenter
  • 2964 Views
  • 2 replies
  • 0 Likes

Global Protect fails to connect Apple iOS

Hi all, We're encountering an issue when trying to connect to our VPN using the GlobalProtect app on iOS. After entering the portal address, the app redirects to Azure AD for authentication. Once credentials are entered, we receive the following error: Connection FailedGlobalProtect failed to connect to the login server. Contact your IT help ...

IMG_3316.jpg

Resolved! User-id with GP client certificate authentication

Hi,I have questions regarding user-id operation with GP client certificate authentication only for iOS/Android devices. Current state:We have GlobalProtect portal and external gateway on the same firewall with SAML authentication for mobile devices - iOS (on-demand, but enforcement to use VPN is achieved with proxy file) and Chrombook (always-on...

Global Protect Dual ISP

Hello i have configuration that need to be revise since there some ISP that can't provide asymmetric connection source. the rest Inbound NAT already clear using PBF but only Global Protect that still can't be enforce symmetric. Here my example configuration in firewall : ISP A : 10.10.10.2/28 ( Zone : Untrust ) GW ISP A : 10.10.10.1 VPN ISP A I...

PreviousConfig.jpg
NYanico by • L1 Bithead
  • 2163 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect brute force config.

Good day all, I was reading a few articles bout changing the config for Brute Force: Object -> Vulnerability Protection --> Exceptions. I actually have two. One called Vulnerability Protections Profile-Strict and the other default. I check both of them and I do not see the 40017 that are mentioned. So I thought it was as easy as jus...

WGranada_0-1754315139237.png

GlobalProtect CLI error: cannot connect to local gpd service (SAML, OpenSUSE/Ubuntu)

We want to test GlobalProtect (PanGPLinux-6.2.8-c2) on an unsupported version of OpenSUSE 15.5 CLI. During installation and when attempting to connect, we encounter the error:“cannot connect to local gpd service”,even though the service is running and reported as active. Additionally, we are using SAML for authentication. In the GUI version, ins...

Global Protect Product IDEA !

It would be great if the Global Protect ICON which appears in my MacBook iOS Menu Bar when the VPN is connected could be modified to have the following features:Turn solid GREEN colour when connectedFLASH RED when disconnectedFLASH ORANGE when a timeout is approaching and offer to continue or dropI find my Global Protect VPN client (which is req...

Global Protect before logon shows "Connecting" just after -registerplap with no portal set

Hi, i have a problem with GP on newly installed Windows 11 Pro with GP 6.3.3-633. I am trying to setup GP before logon. I did that PANGPS.exe -registerplap and just after reboot Network Logon icon shows up but when I click it it shows GP icon and "Connecting" all the time, while I did not set any portal yet. Reboot is not helping. It's not showi...

image.jpeg
Buko84 by • L0 Member
  • 1371 Views
  • 1 replies
  • 0 Likes

Resolved! GP and auth fails

Good afternoon! My Global Protect has 2FA set up so I'm only somewhat concerned about the number of fake connections I'm getting in the auth logs. They're all being routed to the identity provider and are getting squashed. However, I'd like very much to stomp these connections earlier in the chain and save myself some bandwidth. I've noted that ...

ghughes by • L1 Bithead
  • 4314 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect version 6.1.1-5 download

I deployed client 6.1.1 into ConfigMgr and deployed it out to our clients to replace our older VPN system. However, when installed, it updates to the version mentioned in the subject. Where can I get this update I cannot find it in the app updates section. I only see 6.1.1. Thank you, AaronZ GlobalProtect

aaronz by • L0 Member
  • 25224 Views
  • 2 replies
  • 1 Likes
  • 1722 Posts
  • 67 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks