We have some Windows 11 clients in our environment, which cannot create a tunnel to the gateway. The Global Protect Version is 6.2.7-1047. In the PanGPS.log, I see the following errors: connect failed with 5 seconds timeout. Failed to connect to captive.apple.com on 80 with return value -1 and socket error 0(0) TSLog: Set error_stage = Tunnel...
Good afternoon, I am having trouble with connecting to this fleet 3 dashboard, with GP. It appears to be a a DNS issue, because it will find the local network when GP is disabled. The virtual adapter takes over, and uses our DNS server, so it is not on a local network at that point. I have tried changing the DNS addresses, in the adpater an...
I am attempting to install GlobalProtect on my MacBook Pro (M1 chip).I am currently using macOS 15.4After downloading the GlobalProtect client, launching the installer and clicking through the default steps, the installer stalls on the "Installation" phase.The message "Preparing for installation..." remains in the status window indefinitely.Acco...
hi,working with multiple microsoft-accounts and member of different m365 tenants you have to log-off from your browser sessions.this because global protect opens a browser page without the possibility to select your microsoft account like "pick an account" with edge and you are logging-in with single sign on and with your account.it is possible ...
We've been tracking the scanning campaign that made the news recently concerning scanning and dictionary attacks against GlobalProtect portals. We've been able to put together a parser to pull and deduplicate IP addresses from our logs for those attempts. Anyone doing something similar? Palo Alto, would there be interest in ingesting these som...
Hi! Been trying the Embargo Rule for Geo Location restrictions in for Global Protect in Prisma Cloud. This works prefect to exclude the countries you do not want logins from. What I would like to know is if someone been able to use similar rules to add EDLs or Palo Alto Built in EDLs in the same type of rule. I cannot find any information on...
Seeing a strange issue where the wrong HIP Profile is being used to check HIP compliance. We have two GP gateways, one for staff and one for contractors. To match that we have two HIP Profiles doing different checks for each gateway. The contractor one works fine but the staff one is performing HIP checks on the contractor HIP profile, even ...
I'm trying to to run VPN traffic from Kaspersky through GlobalProtect, but when I have them both running and look at my IP, it still shows as the IP provided by Kaspersky and not the GlobalProtect IP. Is there a way to do this with Kaspersky? Otherwise what VPN setup would work
Very new (this is my first time playing with it) and having some issues with getting GlobalProtect up and running in a lab environment. Topology is pretty simple: ethernet1/1 uses DHCP connecting directly to my upstream Internet carrier - zone: outside. ethernet1/2 uses a /30 connecting to my core switch - zone: inside. tunnel.1 is my GP-VPN tu...
Model PA-1410 it does not allow updating the VPN to a current version in the equipment, when the users connect they try to update and it does not do any process and remains in version 6.2. 4 This case was reviewed on another occasion with you and I was indicated that the solution was that by using an FQDN to route traffic to the portal...
Hello everybody, We have an issue with a Macbook that cannot connect to the VPN. Your opinion is valuable: These are the logs : % tail -f /Library/Logs/PaloAltoNetworks/GlobalProtect/pangps.logP 827-T20999 04/16/2025 13:05:55:776 Debug(5690): CPD, CaptivePortalDetectionThread: captive portal is not detected for CP server. iStatus = 200P...
What would be the best way to go about restricting Global Protect VPN access to company managed laptops and iPads?
We are beginning to roll out 6.2.6 and we are wanting to know how the community feels about this version. It may be too early to tell. Is it reliable? Is it responsive? Are we seeing any strange issues? The only data I have is using ADEM and according to ADEM out of 160 users 2 show a fair app score. My colleagues and I have been on 6.2.6 early...
Hey folks, I'm trying to get pre-logon working during the Windows autopilot process so that I can just hand out laptops and have people take them home to get configured. During the autopilot process I am deploying GlobalProtect during the device setup with a command line like this:/quiet PORTAL="devicevpn.mydom.com" ShowPrelogonButton="yes" CONN...
TomYoung
on:
Unable to make GlobalProtect Changes
reaper
on:
Brand New Deployment - GlobalProtect vs Prisma Access Agent
BPry
on:
Global protect with LOOPBACK Interface
reaper
on:
GlobalProtect Mac Client ENDLESS POPUPS that TAKE FOCUS from other apps
