GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

GlobalProtect Internal Host Detection with Always-On and Enforcement

Hello, I am trying to deploy GlobalProtect on some of our endpoints, but I'm running into a set of issues due to our business requirements. The requirements are:VPN is in Always-On with full enforcementAll traffic from those devices must stay internal, or be tunneled over the VPN (excepting what's needed for tunnel establishment)MFA is require...

gkevlin by • L0 Member
  • 5173 Views
  • 3 replies
  • 0 Likes

Globalprotect login page blank

Hi All, I am a regular user of Globalprotect VPN software for my client.I am using Globalprotect Version 5.0.5-28 provided by my company.I use it everyday to login for the past 3 years. But I am facing a unique issue recently which my IT team and myself could not able to resolve!! Please HELP. The issue is, I am not getting the login page but in...

Global protect Err Msg 3.png

Scanning campaigns against PAN OS Global Protect gateways

Recently we saw Scanning campaigns against PAN OS Global Protect gateways. Which is the stable version of Global protect client version for Windows 10/11 ? https://thehackernews.com/2025/04/nearly-24000-ips-target-pan-os.html https://www.bleepingcomputer.com/news/security/nearly-24-000-ips-behind-wave-of-palo-alto-global-protect-scans/ https:/...

k.pillai by • L0 Member
  • 1315 Views
  • 2 replies
  • 0 Likes

GlobalProtect Gets White Screen at CBL (v. 6.0.4-c26)

Hello, My organization is having an issue with connecting to the GlobalProtect VPN app 'Connect BEFORE Logon' (CBL) feature specifically with the 6.0.4-c26 version. Our previous version, 5.2.6 handled this feature just fine but our organization needs to utilize the latest version for security reasons. 6.0.4-c26 can connect to the VPN normal...

Android OS cannot connect on GP using ECDSA algorithm

Hi, Is anyone encountering the same issue, where an Android user cannot connect to GP VPN? Here are the current settings: PAN-OS version: 11.1.14-h7 GP on Android version: 6.1.6-730 Android version: 14 Fortunately, it was fixed temporarily by replacing the certificate used by the GP portal/gateway from ECDSA to RSA. Therefore, it was co...

MAC Default Web Browser Auth Block

We are testing GP 6.2.7 always-on with enforcing connection for internet set. Our windows machines work just fine with the embedded browser but we are having an issue with MACs. Some of our MACs are trying to connect and redirect to the default web browser ( we don't have default browser set in configurations). The page redirects to login.micr...

User/Group mapping with GP SAML (User-ID)

Hi, I've got GP configured with SAML authentication and it works great. However, I would need to get out User-ID or group so that I can use them in security policies to allow or deny specific rules and access to resources. Is that possible and how? Thanks

update Global Protect VPN using sccm

trying to deploy GP VPN client to users using sccm and I am seeing installation of global protect could not be completed because these applications were running Globalprotect Client GlobabProtect service to install successfully, please these applications and then retry the installation

gbakkali by • L1 Bithead
  • 1768 Views
  • 3 replies
  • 0 Likes

saml auth clear user in globalprotect browser

I manage many GlobalProtect VPN environments. One inparticular annoys me, in its portal configuration it uses the Palo Alto web browser for SAML authentication. As a result .... because I have used the GP web browser for authentication in the past.... I can't seem to clear the user it tries to authenticate with against other GlobalProtect envir...

ChrisVee by • L1 Bithead
  • 14078 Views
  • 7 replies
  • 1 Likes

Resolved! Global Protect Clientless VPN

Hi Guys, I am new to Palo and looking for little guidance. I setting up a clientless VPN along with GP. (one user will get access through GP Agent and second user group will only access the Clientless (web portal type). I have the GP connected, SplitTunnel working no issue - I am having issues connecting a user via ClientLess. I have pub...

KGupta133201_0-1742625908851.png
KGupta133201_0-1742626101937.png

Resolved! Limit access to physical adapter using Global protect

I want to preface this, we are not having issues with Global protect per se, rather we are looking to limit the access to the device running global protect. We recently have seen an instance of a device running GP that was locked due to a bad actor RDPing to the public IP address of the device. We are assuming the device was connected directly...

Resolved! GlobalProtect doesn't upgrade

Our current version in clients is 5.2.7. Now I have activated 5.2.8 but clients doesn't upgrade. Our setting for upgrade is allow transparently. Client machines shows pop up that GlobalProtect agent upgrade is in progress please wait etc... but nothing happens. Previous update to 5.2.7 couple of month ago went smoothly. This is first time this k...

ToniE by • L2 Linker
  • 17443 Views
  • 8 replies
  • 0 Likes
  • 1708 Posts
  • 68 Subscriptions
Labels