GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Global Protect + SAML & Client Download Page vs Authentication Successfull

If I had hair left I would be ripping it out.We have Global Protect + SAML multifactor using the default browser for that SAML. It has worked ok for more than a year.Then magically, early this month, up to a dozen users a day after completing the multi-factor are redirected to Global Protect's Client Download page instead of the "Authentication...

Acceptable packet loss over Global Protect VPN?

Dear all, I was just wondering if others suffer from packet loss over their GlobalProtect VPN connection which has any impact on the connection or applications? We use a financial package that has a fat app on the endpoint and connects back to an SQL db on campus. This app doesn't deal with packet loss very well and bombs out every now and then....

Multicast traffic on GP

Hey, We have multicast traffic in the network. We recently deployed GP on our network and can't access the multicast streams. I heard GP doesn't support the multicast, but I also heard GP has a solution to support multicast. Any suggestions are helpful. Thanks, Santosh.

sneelapu by L0 Member
  • 922 Views
  • 1 replies
  • 0 Likes

I have a few GlobalProtect users unable to connect after I updated to 6.2.8 and they ran windows updates.

So far only 4 out of 50+ users have been affected and those were resolved by uninstalling KB5058411 or just waiting for the next day. I am looking to see if there are any known issues related to this update. The error they receive is "could not connect to the GlobalProtect service" even though the address is correct and almost all of the other...

LSUgEEk by L1 Bithead
  • 3538 Views
  • 2 replies
  • 0 Likes

Enabling S2S VPN based tools accessible on Global Protect VPN

Hello Team, We want to use the same subnet used in the office(on which S2S VPN is configured) to be configured for Global Protect VPN so that users will be able to access the S2S VPN tools. For ex:- Office subnet- 172.21.0.0/16S2S VPN Subnet- 172.21.10.0/24Global Protect VPN-172.21.10.100-172.21.10.200 Kindly suggest regarding the possibilities.

Global protect

Hello, After upgrading the GlobalProtect client, will users still be able to connect properly if they are using an older version? Additionally, how can I test the upgrade on a small group of users before deploying it across the entire production environment? Could you also advise on the key points to ensure a smooth upgrade process? Thank you,Pa...

Global Protect and User_ID/Group Mapping

Hi I have been struggling with an issue that I have seen many times with the GP user/group mapping when using two types of auth resources. We have are on-prem VPN portal/gateway using Azure SAML auth. Which is turn uses the upn for login (i.e username@domainname.com). The firewall hosting the portal and gateway is using LDAP servers/userID agent...

D.Maas by L1 Bithead
  • 1293 Views
  • 1 replies
  • 0 Likes

Network Connection Unreachable/Portal Unresponsive

Has anyone seen this error "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect" while on their company internal network? I recently got this while at one of our locations and did the following: 1) rebooted 2) turned wifi off and on 3) connect to ethernet And nothing has worked. I wen...

Resolved! Global Protect 6.2.7 and Advisory

Hello Team, Regarding the Security advisory in the link https://securityadvisories.paloaltonetworks.com/CVE-2025-0120 its talking about Global Protect 6.2.7-1077, but so far there is not 1077 update patch but only 1047,even when I check the Global Protect versions available fro mthe firewall. Does that means that 6.2.7-1077 is ty...

Resolved! SSL vpn VPN and Fortinet stpping support

Hello Team, Regarding the latest new received, We got informed that Fortinet has stopped supporting SSL VPN tunnel mode starting FortiOS 7.6.3 and they strongly recommends customers to migrate to IPsec VPN. well, my VPN remote access in my company based on Paloalto SSL VPN, and my question is that is there any plans intentions i...

Need to change Gp portal Via SCCM

In my environment, the GP client is deployed with the portal name Test1, and I want to change it to Test2. I am able to do this using Intune through the remediation method via a script, but the same script package is not working with SCCM. Please suggest a method to deploy it successfully so that the portal name changes. Also, if there are any s...

Resolved! GlobalProtect MFA With Radius and Email

Has anyone setup a free MFA with GlobalProtect? I was thinking something along the lines of using a FreeRadius server to generate an email code to the user. It has to be doable... FreeRadius, connected to LDAP/AD, pulls the email address and sends a code, which the user appends to their password on the GlobalProtect Client. Doable? Or wishfu...

wocomike by L1 Bithead
  • 8448 Views
  • 6 replies
  • 0 Likes

Resolved! Failed to create tunnel with gateway

We have some Windows 11 clients in our environment, which cannot create a tunnel to the gateway. The Global Protect Version is 6.2.7-1047. In the PanGPS.log, I see the following errors: connect failed with 5 seconds timeout. Failed to connect to captive.apple.com on 80 with return value -1 and socket error 0(0) TSLog: Set error_stage = Tunnel...

  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
Labels