Hi,
I have a Pa-850 running 10.1.8 and globalprotect 5.2.6-87.
My issue appears whenever I try to assign different "Agent->Client settings" at the gateway level based on an AD group.
The portal is configured to authenticate against Azure AD using
...
Hi,
We are using our on prem LDAP to fetch groups on the Palo. For GP authentication as well, we are using group in
1) GP Portal > Agent > Config Selection Criteria > User/User Group
2) GP Gateway > Agent > Client Settings > Config Selection Criteria
...
Hi,
If I am using SAML authentication on my portal and gateway what is the best practice around Authentication cookies override.
When using SAML my user will be prompted via the default browser 2 times ones for the portal and ones for the gateway.
...
Hi,
I am trying to configure globalprotect to use SAML authentication for the portal and gateway. The authentication seems to work but when, but i am not getting a valid client config when i use groups in allow list.
I am sure it is related to grou
...
Hi All – Just curious on when to get concerned about unauthorized GP login attempts. I’ve had a person from the RU making login attempts on our GP for about a year now. I speculate they are new at this, after a while they learned how to mask the ‘HOS
...
Hello valued community, unfortunately, I am still seeking answers for my issue.
I have an HIP profile that works when defined as an example for someone establishing a VPN connection using RDP. However, I am unable to achieve results when applied to
...
We need to upgrade Global Protect Client from 5.2 to 6.2.7 ,
Is the direct upgrade would be possible or do we need to upgrade to any intermittent OS.
Has anyone dealt with an issue where a vpn user is out of the country and cannot gain access? They are prompted to login, but it just continues to spin. In the GlobalProtect logs, it's saying 'success' though the portal, but not through the gateway.
Hello,
I’m using Azure AD as the Identity Provider (IdP) and GlobalProtect as the Service Provider (SP) for SSO. I’m having difficulty updating the SAML certificate.
I’ve followed these steps:
1. Issued a new SAML certificate in Azure AD.
2. Imported
Hello,
Has anyone else have issues with random GP disconnections since recently (May/June/July 2021) on GP version 5.0.x and 5.2.x ?
It started around one month ago throughout the whole company and we weren't able to figure out what's going on till no
...
Hi, Has anyone running the client version of GP successfully mittigated the Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSL/TLS, D(HE)ater) for the GP portals? I have only found ways to disable DHE for clientless GP configuration.
We are
...
Hello Dear Community,
I have 2 SSL VPN rules assigned to my username in Palo Alto firewall. For testing purposes, I added a HIP profile to only one of them. The device I tested does not comply with the HIP profile.
The VPN connection is notifyed as f
...
Hi, I am having a problem where random global protect clients are connecting and are able to send traffic through the tunnel to the Data Center when traffic is initiated in the client workstation. However if we try to RDP or send any traffic to the c
...
we are planning to configure certificate check HIP object and authentication based on that. we are not getting any clear picture in online or palo alto portal. please help up to provide resource...
Hi,
I received two kinds of events when I tried to connect VPN. Which event I can consider as a threat.
I have excluded the username pre-logon from monitoring but for the destination 0.0.0.0 is receiving.
Why destination IP show 0.0.0.0? Can I ign
...
Raido_Rattameis
TomYoung
on:
Failed GlobalProtect login confusion
OtakarKlier
on:
Clientless VPN Portal Brute Forcing
TomYoung
on:
Unauthorized GP login attempts
TomYoung
on:
HIP profile is not working with WAN rule
