This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Globalprotect Credential Provider not capturing automatic logon

Overview: I have Windows 10 Desktop machine which runs in KIOSK mode, it automatically logs in to my dedicated AD KIOSK user through setting the AutoAdminLogon Registry keys. We are using GlobalProtect for our user identity when inside of the corporate network combined with the GlobalProtect Windows login credential provider to allow SSO authent...

Resolved! Global Protect Client disconnect Issues after upgrading to Pan-OS 11.1.0

Hi Team We upgraded Palo Alto FW to 11.1 and started having VPN Global Protect Client Issues where it would disconnect/reconnect multiple times. It would get connected and there wouldn't be any internet access, wouldn't allow any traffic so something isn't working. Flipped back over to the passive firewall which hadn't been upgraded yet and ev...

Resolved! Unable to connect to VPN with iPhone Personal Hotspot

Hi All,My company uses the global protect vpn and I am trying to connect to vpn using the iPhone Personal hotspot and always I face the same issue only in some luck I will be able to connect like 5% success that also I need to restart my MacBook pro multiple times. Please someone give me the exact solution. I have tried the following solution b...

adisiri by • L0 Member
  • 34397 Views
  • 3 replies
  • 1 Likes

Android certificate delegation

Has anyone been able to get certificate delegation working so the Android client doesn't prompt the user to select their cert? I've been following the guidance here but the logs just show that the restriction can't be applied. We generate the certificate using an internal PKI where a request is made and generated to the device, so the bit where ...

GlobalProtect Always on Network Connection Forced

We are in the testing phase for GP Always on. I currently have forced network connection with internal host detection and it is working fine. I did a quick search and did not find the configuration tweaks that would account for Always On / Forced Connection when the portal is unavailable. Use case...I have a user travelling abroad. When t...

Resolved! FIDO2 support for GlobalProtect client

FIDO2 Security cards during Entra ID SAML authentication does not work. The option to select a hardware "security key" during the Entra ID login flow is not shown. Only the built-in/embeded GlobalProtect web browser exhibits this issue. The feature listing for GlobalProtect 6.2.3 says, "Starting with GlobalProtect 6.2.3, the embedded browser f...

GlobalProtect App: Portal Connection/Cache Expected Behavior

Hello everyone, I have questions about the expected behavior of GlobalProtect. Is it correct to assume that the GlobalProtect App will operate as follows depending on whether the Portal can be connected and whether there is a cache? (I would appreciate an early response) 1. If the Portal can be connected when the client is started and logged...

Connect Before Logon on version 6.2.5 - AutoPilot - Blank White Screen after Azure MFA

We are deploying version 6.2.5 on our Windows 11 autopilot devices. Using SAML. When performing Connect Before Logon we can authenticate and satisfy the Azure MFA prompts, however, Global Protect shows a blank white screen (seems like an embedded web browser). Aside from registering PLAP are there any other registry settings I need to configure?...

gpblankscreen.png

Virtual Adapter was not setup correctly due to a delay (WIN10)

I'm using GlobalProtect Ver 5.2.12-26, on my windows 10 laptop and it has worked just fine for last month, but recently I continue to get the "Virtual Adapter was not setup correctly due to a delay". I've completely uninstalled/reinstalled a number of times with no success. I did notice in the following setup file logs: Driverinfo, Serviceinfo, ...

Global Protect - ARM64 - Service not working

Hi, We have installed Global Protect 6.0 onto a Surface Pro X running ARM64 processor but when starting Global Protect it instantly says 'Count not connect to Global Protect service. make sure Global Protect service is running. Have gone through the services and can see that GP is running. Have tried uninstalling, reinstalling but nothing h...

GlobalProtect requires a reinstall to use - doesn't open browser SSO windows

Hi all, I'm assisting an individual in our organization on a Windows laptop. They are unable to connect to GlobalProtect unless they reinstall the app. The second time they try to log in, the app crashes when it tries to load the SSO window/browser. Any ideas? We've installed the app with the DEFAULTBROWSER=YES flag enabled. Thanks.

Global Protect External Gateways and Azure Traffic Manager - Potential configuration issues.

Hi All,We have been experiencing some odd behavior with our Global Protect Client VPN and I wanted to better understand what our design should look like and if we had conflict somewhere. Our organisation currently uses Azure Traffic Manager to distribute requests for vpn.organisation.com to geographically separated Palo Alto Gateways (based on a...

how to enforce user to connect to GP internal GW

Hi Expert, I have setup an internal GP GW to get user-id, which works fine. But now the question is how to enforce users to connect to it once in office. On GP portal, I set <Enforce GlobalProtect for user access> to Yes , but it is not working. Tried both <pre-logon always on> and <user-logon always on>. Please let me kno...

GlobalProtect - bruteforce - limit user/password guessing

I now that this topics was discussed 100X times about GlobalProtect bruteforce. It is possible po setup GlobalProtect policy in a way, if a user is not part of any AD group, than no AD/LDAP authentication is beeing trigered to internal AD. We are seeing bruteforce attempt with non-existing AD users and we want to limit this. Br, Luka

Global Protect stable and non vulnerable version to upgrade

Hello, We are at present using 6.0.7 version, we are planning for upgrade it to any better stable and secure latest version. In this current version we get multiple reports from users on disconnection, performance and some vulnerabilities as well. Earlier in Cisco AnyConnect which we had before 3 years we hardly have any users reporting issue....

  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks