This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Users getting authentication error while accessing GP VPN

Hello Team, At one of our locations, users were unable to access GP VPN due to authentication failure. we could see below logs on, how can we find out the root cause, was it delayed response from IDP or Firewall to NTP 'SAML message from IdP "https://sts.windows.net/XXXXXXXXXXXXXXX/" (server profile "SAML-AUTH") was expired already (not_on...

CSOIMGL2 by • L0 Member
  • 899 Views
  • 1 replies
  • 0 Likes

Local and SAML users authentication on the single GP Portal and Gateway

I have a task to use 2 authentication methods - local and SAML on the single GP Portal and Gateway. First check local users and if username not found then check SAML users. As I know authentication sequence isn't supported for SAML. Separating users by OS type isn't way for us because different users (SAML and local) can use the same OS type. Ar...

Global Protect VPN blocks guest OS traffic

Hello all, Using VirtualBox 7 and I assumed that by having NAT network set on my Guest OS that it would work straightforward and I would be able to access services from the VPN that is running on my host OS (win11). First of all the problem happens when VPN is On. When disabled everything works normal. The below remarks are for when the VPN is...

Panagiss by • L1 Bithead
  • 1339 Views
  • 2 replies
  • 0 Likes

GlobalProtect App Config Refresh Interval　Expected Behavior

Hello everyone, I would like to confirm the specifications of "GlobalProtect App Config Refresh Interval". Is it correct to understand that the above interval is the interval at which the GP Agent goes to the portal to obtain the configuration when it is able to connect to the portal, and that if the GP Agent cannot connect to the portal, this r...

GP Client for MAC device cannot be used normally

Hi all, GP version 6.2.2 Machine: MAC OS When user log in to GlobalProtect on a Mac for the first time, i can enter user1 to log in normally.However, when restart the computer and log in again, i find that the user account has been locked and is displayed as user1 and cannot be modified. we can only enter the password, so the login will fai...

Wildcard Support for Application-based Split Tunnel Question

I was reading this article and it seems like a fairly easy way to split tunnel Microsoft Teams to exclude it from the GlobalProtect VPN. Especially now with new Teams using a product version in the application path. I see the article is written from the perspective of Prisma Access. Any clue if I can use this with standard PAN-OS managed fire...

Resolved! Use "Embedded Browser" within SAML Authentication with the combination PAN-OS 11.2.3-h5 and GP-6.2.7

Hello together, we have the situation that a customer want use the Embedded Browser within his SAML Authentication process. The correspondingly necessary option in the GP-App section within the GP-Gateway configuration is set. But in every SAML Authentication process the default browser is used. Have somebody tried out this combination, contacte...

GlobalProtect no longer prompting for account

Hello! I use a GlobalProtect VPN and have been having an issue logging in recently. The GlobalProtect VPN normally would prompt me with an Office 365 page to specify which account I want to login with but that no longer appears and will automatically use my windows account. I am getting the error message that states "The account needs to be add...

rjrogus by • L0 Member
  • 55877 Views
  • 8 replies
  • 1 Likes

Configure Post connect script

I looking to configure a post connect script which has to be pushed to all the global protect client, can this be done through GlobalProtect Portal?I'm aware that Microsoft provides group policy and we have ansible but I would prefer not to take that route. PS - All clients are running on windows systems.

shshkush by • L0 Member
  • 1145 Views
  • 1 replies
  • 0 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks