GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Prisma Access Internal Gateway

Hi All, Has anyone had used Prisma Access Internal Gateway for user-to-IP mapping from Remote Networks to Prisma Access? It doesn't work for me! I can view the source user under GlobalProtect Logs/Strata Logging Service but not under traffic logs The connection method is always on. Hopefully someone out there has configured it and it is work...

Global Protect on Android vs Compliance requirements from Intune

Hello We'd like to use Global Protect on Android (latest Samsung). There devices are managed by Intune in Full Management profile. For Global Protect we use SAML profile with MFA and Conditional Access. All our users have compliance requirements (by conditional access policies) to use SAML only on compliant devices. Global protect cannot bypass ...

Clientless VPN to auto launch app

I have just found topic in knowledgebase regarding auto launching application for globalprotect clientless access - if there is just one app and URL bar checkbox is disabled. Is is still valid? Does anyone uses that? I've just tried to reproduce in my lab, but either way, even 1 app is enabled, checbkox is disabled user is hitting portal page ...

MarcinJ by L1 Bithead
  • 1546 Views
  • 3 replies
  • 1 Likes

GlobalProtect Internal Host Detection with Always-On and Enforcement

Hello, I am trying to deploy GlobalProtect on some of our endpoints, but I'm running into a set of issues due to our business requirements. The requirements are:VPN is in Always-On with full enforcementAll traffic from those devices must stay internal, or be tunneled over the VPN (excepting what's needed for tunnel establishment)MFA is require...

gkevlin by L0 Member
  • 3817 Views
  • 3 replies
  • 0 Likes

Globalprotect login page blank

Hi All, I am a regular user of Globalprotect VPN software for my client.I am using Globalprotect Version 5.0.5-28 provided by my company.I use it everyday to login for the past 3 years. But I am facing a unique issue recently which my IT team and myself could not able to resolve!! Please HELP. The issue is, I am not getting the login page but in...

Global protect Err Msg 3.png

Scanning campaigns against PAN OS Global Protect gateways

Recently we saw Scanning campaigns against PAN OS Global Protect gateways. Which is the stable version of Global protect client version for Windows 10/11 ? https://thehackernews.com/2025/04/nearly-24000-ips-target-pan-os.html https://www.bleepingcomputer.com/news/security/nearly-24-000-ips-behind-wave-of-palo-alto-global-protect-scans/ https:/...

k.pillai by L0 Member
  • 1133 Views
  • 2 replies
  • 0 Likes

GlobalProtect Gets White Screen at CBL (v. 6.0.4-c26)

Hello, My organization is having an issue with connecting to the GlobalProtect VPN app 'Connect BEFORE Logon' (CBL) feature specifically with the 6.0.4-c26 version. Our previous version, 5.2.6 handled this feature just fine but our organization needs to utilize the latest version for security reasons. 6.0.4-c26 can connect to the VPN normal...

Android OS cannot connect on GP using ECDSA algorithm

Hi, Is anyone encountering the same issue, where an Android user cannot connect to GP VPN? Here are the current settings: PAN-OS version: 11.1.14-h7 GP on Android version: 6.1.6-730 Android version: 14 Fortunately, it was fixed temporarily by replacing the certificate used by the GP portal/gateway from ECDSA to RSA. Therefore, it was co...

MAC Default Web Browser Auth Block

We are testing GP 6.2.7 always-on with enforcing connection for internet set. Our windows machines work just fine with the embedded browser but we are having an issue with MACs. Some of our MACs are trying to connect and redirect to the default web browser ( we don't have default browser set in configurations). The page redirects to login.micr...

User/Group mapping with GP SAML (User-ID)

Hi, I've got GP configured with SAML authentication and it works great. However, I would need to get out User-ID or group so that I can use them in security policies to allow or deny specific rules and access to resources. Is that possible and how? Thanks

update Global Protect VPN using sccm

trying to deploy GP VPN client to users using sccm and I am seeing installation of global protect could not be completed because these applications were running Globalprotect Client GlobabProtect service to install successfully, please these applications and then retry the installation

gbakkali by L1 Bithead
  • 1484 Views
  • 3 replies
  • 0 Likes

saml auth clear user in globalprotect browser

I manage many GlobalProtect VPN environments. One inparticular annoys me, in its portal configuration it uses the Palo Alto web browser for SAML authentication. As a result .... because I have used the GP web browser for authentication in the past.... I can't seem to clear the user it tries to authenticate with against other GlobalProtect envir...

ChrisVee by L1 Bithead
  • 12941 Views
  • 7 replies
  • 1 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
Labels