This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect VPN configuration issue

Hi Friends, Recently i am facing configuration issue with related to Global Protect. The customer has an ISP line connected to a router, and from the router, it's connected to a Palo Alto firewall. Now, the customer wants to use GlobalProtect, and I’ve completed all the basic configurations. However, I am encountering an issue while adding the...

3 (3).png

Clientless VPN Applications and Application Groups

Hi Community Friends, Strange issue with Clientless VPN Applications and Groups in the portal. When I assign applications to a User or Group they do not show up.. only applications set to ANY user. We have LDAP setup with Active Directory, the portal can see the groups I'm assigning inside the Global Protect Portal configuration. Further,...

While connecting to Global Protect, we receive an error "This site can't be reached"

Hello dear forum participants, For a couple of specific users, after user clicks on "Connect" on Global Protect and then enter their credentials on the web page ,we receive this error page below as "This site can't be reached" . Then no connection to Global Protect established. We uninstalled/reinstalled Global Protect, changed the defaul...

mcostura_0-1740406408300.png
mcostura by • L0 Member
  • 1440 Views
  • 3 replies
  • 0 Likes

Downloaded and installed GlobalProtect app not running due to having macOS 10.15.7

Hi all, I've downloaded and installed the GP app. When I try to run the app, it's telling me that I can't use this version of the application because I have macOS 10.15.7, and I require macOS 11.0 or later. Looking around the internet, it seems that my macOS should be able to run the app. Does anyone have any workarounds for this? Thank you, J

Cached credential issue when using SAML with Global Protect Client and MS Azure

We are using SAML with Global Protect Client and MS Azure and it works well for us, with one caveat. We have a consultant who uses the Global Protect client to establish a VPN connection to their network. When I have them attempt to use the Global Protect client to establish a VPN connection into our network (using an O365 account on our tenan...

ddockter by • L1 Bithead
  • 33770 Views
  • 12 replies
  • 1 Likes

Certificate Chain Requirements from External CA for Global Protect

Hi Everyone, So I'm having issues configuring my GP as it does not allow me to select the server-cert from the TLS/SSL Service profile Window. The server-cert is not even an option to select from within the window itself and when i try to import it from inside the TLS/SSL Service profile window - it imports but errors out saying the cert is inva...

GP7337_1-1738863827766.png
GP7337 by • L1 Bithead
  • 1629 Views
  • 3 replies
  • 0 Likes

Resolved! Multple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"

Hi everyone, Could you please help me to figure out what is the right format I should use to add multiple entries for "Allow specified fqdn when Enforce GlobalProtect Connection"? In the following support doc, I can see that I must put space before the wildcard character. Enforce GlobalProtect Connections with FQDN Exclusions Additionall...

Users getting authentication error while accessing GP VPN

Hello Team, At one of our locations, users were unable to access GP VPN due to authentication failure. we could see below logs on, how can we find out the root cause, was it delayed response from IDP or Firewall to NTP 'SAML message from IdP "https://sts.windows.net/XXXXXXXXXXXXXXX/" (server profile "SAML-AUTH") was expired already (not_on...

CSOIMGL2 by • L0 Member
  • 949 Views
  • 1 replies
  • 0 Likes

Local and SAML users authentication on the single GP Portal and Gateway

I have a task to use 2 authentication methods - local and SAML on the single GP Portal and Gateway. First check local users and if username not found then check SAML users. As I know authentication sequence isn't supported for SAML. Separating users by OS type isn't way for us because different users (SAML and local) can use the same OS type. Ar...

  • 2077 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks