GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Android OS cannot connect on GP using ECDSA algorithm

Hi, Is anyone encountering the same issue, where an Android user cannot connect to GP VPN? Here are the current settings: PAN-OS version: 11.1.14-h7 GP on Android version: 6.1.6-730 Android version: 14 Fortunately, it was fixed temporarily by replacing the certificate used by the GP portal/gateway from ECDSA to RSA. Therefore, it was co...

MAC Default Web Browser Auth Block

We are testing GP 6.2.7 always-on with enforcing connection for internet set. Our windows machines work just fine with the embedded browser but we are having an issue with MACs. Some of our MACs are trying to connect and redirect to the default web browser ( we don't have default browser set in configurations). The page redirects to login.micr...

User/Group mapping with GP SAML (User-ID)

Hi, I've got GP configured with SAML authentication and it works great. However, I would need to get out User-ID or group so that I can use them in security policies to allow or deny specific rules and access to resources. Is that possible and how? Thanks

update Global Protect VPN using sccm

trying to deploy GP VPN client to users using sccm and I am seeing installation of global protect could not be completed because these applications were running Globalprotect Client GlobabProtect service to install successfully, please these applications and then retry the installation

gbakkali by L1 Bithead
  • 1421 Views
  • 3 replies
  • 0 Likes

saml auth clear user in globalprotect browser

I manage many GlobalProtect VPN environments. One inparticular annoys me, in its portal configuration it uses the Palo Alto web browser for SAML authentication. As a result .... because I have used the GP web browser for authentication in the past.... I can't seem to clear the user it tries to authenticate with against other GlobalProtect envir...

ChrisVee by L1 Bithead
  • 12713 Views
  • 7 replies
  • 1 Likes

Resolved! Global Protect Clientless VPN

Hi Guys, I am new to Palo and looking for little guidance. I setting up a clientless VPN along with GP. (one user will get access through GP Agent and second user group will only access the Clientless (web portal type). I have the GP connected, SplitTunnel working no issue - I am having issues connecting a user via ClientLess. I have pub...

KGupta133201_0-1742625908851.png
KGupta133201_0-1742626101937.png

Resolved! Limit access to physical adapter using Global protect

I want to preface this, we are not having issues with Global protect per se, rather we are looking to limit the access to the device running global protect. We recently have seen an instance of a device running GP that was locked due to a bad actor RDPing to the public IP address of the device. We are assuming the device was connected directly...

Resolved! GlobalProtect doesn't upgrade

Our current version in clients is 5.2.7. Now I have activated 5.2.8 but clients doesn't upgrade. Our setting for upgrade is allow transparently. Client machines shows pop up that GlobalProtect agent upgrade is in progress please wait etc... but nothing happens. Previous update to 5.2.7 couple of month ago went smoothly. This is first time this k...

ToniE by L2 Linker
  • 16209 Views
  • 8 replies
  • 0 Likes

Upgrade GP client using SCCM

Hi All, We have a VPN solution with 3000+ users. However we need to upgrade the GP client ( Current: 5.2.6 | Targeted: 5.2.11) but due to the high volume, we are considering pushing the client over SCCM; group-wise. I have seen some articles outside the live community related to client upgrades over SCCM that can lead to issues. Could you please...

Udana by L1 Bithead
  • 3199 Views
  • 2 replies
  • 0 Likes

Nested plist capable for Mac GlobalProtect?

I want to get the GlobalProtect client version at portal connection, so I'm trying to get it via Portal Data Collection. The problem I'm running into is twofold:1. There is a /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist and a ~/Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist. The value I want is in...

Palo Alto (GlobalProtect) URL duplicated

Hi, everyone!I’ve noticed that when I add a new application and try to access it using the clientless page, the URL is sometimes rewritten with a duplicate path. For example, it becomes:https://vpnconnect.mycompany.org/https/app1.menu.com/app/https/app1.menu.com/app instead of the correct URL:https://vpnconnect.mycompany.org/https/app1.menu.com/...

Global Protect VPN connection no web access

I have had to reconfigure our Global Protect due to dc failure. I am having issues with browsing the Internet once the VPN connection is successful. What am I missing? I cannot browse to anything using the VPN connection. Would love some help on this. Thanks

M.Lowe by L0 Member
  • 801 Views
  • 1 replies
  • 0 Likes
  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels