GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Current GlobalProtect scanning campaign

We've been tracking the scanning campaign that made the news recently concerning scanning and dictionary attacks against GlobalProtect portals. We've been able to put together a parser to pull and deduplicate IP addresses from our logs for those attempts. Anyone doing something similar? Palo Alto, would there be interest in ingesting these som...

Global Protect Embargo Rules

Hi! Been trying the Embargo Rule for Geo Location restrictions in for Global Protect in Prisma Cloud. This works prefect to exclude the countries you do not want logins from. What I would like to know is if someone been able to use similar rules to add EDLs or Palo Alto Built in EDLs in the same type of rule. I cannot find any information on...

Mismatched HIP Profiles

Seeing a strange issue where the wrong HIP Profile is being used to check HIP compliance. We have two GP gateways, one for staff and one for contractors. To match that we have two HIP Profiles doing different checks for each gateway. The contractor one works fine but the staff one is performing HIP checks on the contractor HIP profile, even ...

SRowe5_0-1746045551835.png
SRowe5_1-1746046294286.png
SRowe5_2-1746046440979.png
SRowe5 by L1 Bithead
  • 1701 Views
  • 2 replies
  • 0 Likes

Initial configuration of GlobalProtect

Very new (this is my first time playing with it) and having some issues with getting GlobalProtect up and running in a lab environment. Topology is pretty simple: ethernet1/1 uses DHCP connecting directly to my upstream Internet carrier - zone: outside. ethernet1/2 uses a /30 connecting to my core switch - zone: inside. tunnel.1 is my GP-VPN tu...

GLOBAL PROTECT UPDATE ISSUE

Model PA-1410 it does not allow updating the VPN to a current version in the equipment, when the users connect they try to update and it does not do any process and remains in version 6.2. 4 This case was reviewed on another occasion with you and I was indicated that the solution was that by using an FQDN to route traffic to the portal...

F.Pinar by L3 Networker
  • 1270 Views
  • 1 replies
  • 0 Likes

VPN won't connect on the Macbook

Hello everybody, We have an issue with a Macbook that cannot connect to the VPN. Your opinion is valuable: These are the logs : % tail -f /Library/Logs/PaloAltoNetworks/GlobalProtect/pangps.logP 827-T20999 04/16/2025 13:05:55:776 Debug(5690): CPD, CaptivePortalDetectionThread: captive portal is not detected for CP server. iStatus = 200P...

GlobalProtect 6.2.6 - discovered issues or reliability concerns

We are beginning to roll out 6.2.6 and we are wanting to know how the community feels about this version. It may be too early to tell. Is it reliable? Is it responsive? Are we seeing any strange issues? The only data I have is using ADEM and according to ADEM out of 160 users 2 show a fair app score. My colleagues and I have been on 6.2.6 early...

Global Protect PreLogon during Windows Autopilot with Intune

Hey folks, I'm trying to get pre-logon working during the Windows autopilot process so that I can just hand out laptops and have people take them home to get configured. During the autopilot process I am deploying GlobalProtect during the device setup with a command line like this:/quiet PORTAL="devicevpn.mydom.com" ShowPrelogonButton="yes" CONN...

Global Protect gateway is unresponsive

I have a GP user complaining about his GP sessions getting dropped. He's using certificate auth autovpn. The full error is [Error]: The network connection is unreachable or the gateway is unresponsive. Check the network connection and reconnect. Network discovery started. Now while that is going on, I see in Monitor/Global protect at that time ...

palomed by L3 Networker
  • 49528 Views
  • 10 replies
  • 2 Likes

Set DEFAULTBROWSER=YES only for specific connection

I connect to several VPN servers. One requires DEFAULTBROWSER=YES. I cannot connect to the other servers with this set during install. Is there a way to set this only for specific servers? I found some info from a Google search that indicated I can edit an xml file in user settings, but that file does not exist on my system (AppData\Local\Palo A...

#Global Protect enabling Always on

Hi Team , I am planning to implement Always on Global protect client 6.0 , so would like to know the best practices in implementations and how can i plan the implementation phase ? User-logon (Always On) Most standard corporate users Pre-logon (Always On) Domain-joined laptops needing remote AD login, GPOs, scripts Is it advis...

k.pillai by L0 Member
  • 894 Views
  • 1 replies
  • 0 Likes

Global Protect ARM64 Webview2 Issue

I've been working with a Snapdragon ARM64 processor and can't get 6.2.8.1-183 ARM64 to install properly. I've repaired webview2, uninstalled and reinstalled GP and still a no go. Error message is still: "cannot found the webview2 component" and when reinstalling Webview2 it says Webview2 in already installed.

Devonnem by L0 Member
  • 3925 Views
  • 1 replies
  • 0 Likes
  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
Labels