This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Unable to Connect to Global Protect 6.3.4 iPhone and iPads

Hello everyone, We're experiencing an issue with GlobalProtect on managed iPads and iPhones version 6.3.4-23. I'm trying to determine whether anyone else has run into this recently. Environment GlobalProtect VPN deployed via Microsoft Intune iPadOS devices Authentication through PingID (SAML) VPN type: Palo Alto Networks GlobalProtect Authent...

mtruong_0-1787151999535.png
mtruong_1-1787152104165.png
mtruong by • L0 Member
  • 247 Views
  • 1 replies
  • 0 Likes

Firewall Bios update after activating a new GlobalProtect version

Ran into an oddity today, and I'm not sure if I fully believe support. I upgraded our firewall last week to 12.1.7-h3, all went fine system is running normally. Today I decided to start testing the new version of GlobalProtect (6.3.3-h11). When activating it, it asked if I wanted to do a system health report. Seemed kind of weird, would expe...

PatWruk by • L1 Bithead
  • 204 Views
  • 0 replies
  • 0 Likes

Always on and user MFA

Trying to configure Global Protect on new firewalls and update the MFA Current configuration:Clients configured w/always connected. Portal is configured w/pre-login device certificates from internal PKI. GW is configured w/LDAP and RADUIS. When a user tunnel is established, user must push yubikey to complete the config. New Configuration: We...

C.Meisch by • L1 Bithead
  • 129 Views
  • 0 replies
  • 0 Likes

Does the GlobalProtect Credential Provider CLSID change between versions?

Hi all, We are considering using the Windows GPO “Assign a default credential provider” so that GlobalProtect is selected by default even on the “Other user” sign-in screen. It looks like we need to specify the CLSID (GUID) of the GlobalProtect Credential Provider in the GPO. I would like to confirm: 1. Is the GlobalProtect Credential Prov...

iphone not able to connect to Global protect

iphone not able to connect to Global protect, however things works fine on Android, windows, Mac and other OS. I do have settings on VPN portal set to on-demand. I'm using SAML for authentication. I see that the portal authenticates the user, request reach vpn gateway before-login (gateway prelogin) SAML request is sent and later no logs logs.....

GP logs

We are using Prisma access global protect services. with SAML authentication. we have around 2000 users . we are looking a solution if any users unable to connect the global protect gateway so we can to get the email alert. XYZ users are not able to connect global protect gateway ______ reason. can anyone help to get this solution.

Endpoint Traffic Policy Enforcement on Prisma Access

Hello, I am trying out the "Endpoint Traffic Policy Enforcement" feature on GP to enforce users who are actively trying to avoid connecting to VPN (even if this is set to connect automatically). I have set this setting to "All traffic" on a small test group and it was working great. However, one of the users tried to connect to a Windows 11 ...

Resolved! Global Protect SAML: authentication works fails on matching client config not found. Group not matching.

Hi, I am trying to configure globalprotect to use SAML authentication for the portal and gateway. The authentication seems to work but when, but i am not getting a valid client config when i use groups in allow list. I am sure it is related to group mapping and user id but don't know where exactly it is going wrong. I have the following conf...

zGomez_0-1694012059685.png
zGomez_1-1694012177202.png
zGomez_2-1694012661065.png
zGomez_3-1694012917716.png
zGomez by • L3 Networker
  • 5213 Views
  • 2 replies
  • 0 Likes

IP Validation for GlobalProtect Public IP

Hi All, We are currently attempting to complete GlobalSign IP address validation for our GlobalProtect public IP address.GlobalSign's validation process requires access to a challenge file under:/.well-known/pki-validation/However, our understanding is that Palo Alto does not normally host files under this path.In addition, HTTP validation via p...

Having issues connecting to GlobalProtect VPN from laptop connected with iPhone and JiO ISP hotspot

Hello community, we are facing a strange issue with the globalprotect connectivity. where we are trying to connect vpn from laptop and its connected via iPhone hotspot having JiO sim card, its on 5G network. we have SAML configured to login the global protect but its not happening in above scenario. did someone face similar issue and hav...

Configuring GlobalProtect via Ansible

Hi,I'm working on creating an automated Ansible process through which I can configure GlobalProtect in PAN Firewall.The automaton process I try to create it based on the official Paloalto Repository containing ansible playbooks:GitHub - PaloAltoNetworks/ansible-playbooks: Sample playbooks for the Palo Alto Networks Ansible modules.Unfortunately,...

GlobalProtect Cert+SAML

Hello, I'm reaching out to see if anyone has configured GlobalProtect with cert+SAML authentication with multiple gateways across multiple firewalls. I've been attempting to configure this, however, whenever I use cert+SAML at the gateway and I attempt to switch gateways after logging in, the logs always show "client cert not present". I h...

Global Protect Android client failing with certificate error after upgrading PAN-OS

Dear all, I have a strange error after I upgraded my firewall to PAN-OS 11.1.15 to fix a GP vulnerability. (18990)06/04 17:44:57:208734 - PanKeyManager: Issuers: CN=ixxx, DC=ixxx, DC=local(18990)06/04 17:44:57:208841 - PanKeyManager: Use Cert: gp_user_new(18990)06/04 17:44:57:208883 - PanKeyManager: getPrivateKey for alias: gp_user_new(1899...

GP with Certificate base authentication and LDAP, userid not visible in global protect logs

We have setup wherein user get certificate base authentication on pre logon(machine authentication), When user logged into machine, it must shift from machine name to userid. this transition is not happening. We also don;t require GP client login window popup. It must derive userid and password from windows login. Authentication table we have LD...

  • 1707 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks