This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

how to enforce user to connect to GP internal GW

Hi Expert, I have setup an internal GP GW to get user-id, which works fine. But now the question is how to enforce users to connect to it once in office. On GP portal, I set <Enforce GlobalProtect for user access> to Yes , but it is not working. Tried both <pre-logon always on> and <user-logon always on>. Please let me kno...

GlobalProtect - bruteforce - limit user/password guessing

I now that this topics was discussed 100X times about GlobalProtect bruteforce. It is possible po setup GlobalProtect policy in a way, if a user is not part of any AD group, than no AD/LDAP authentication is beeing trigered to internal AD. We are seeing bruteforce attempt with non-existing AD users and we want to limit this. Br, Luka

Global Protect stable and non vulnerable version to upgrade

Hello, We are at present using 6.0.7 version, we are planning for upgrade it to any better stable and secure latest version. In this current version we get multiple reports from users on disconnection, performance and some vulnerabilities as well. Earlier in Cisco AnyConnect which we had before 3 years we hardly have any users reporting issue....

Problem with Global Protect VPN

Hello everyone, the company I work for has decided to adopt GlobalProtect VPN, working in smart working when from home I try to connect via my company DELL PC to the wifi network of a FRITZ!Box 5690 Pro modem the VPN tries to connect, it succeeds and I notice that it connects with the "SSL" protocol instead of "IPSec" notifying me that the conne...

Erik01 by • L0 Member
  • 1727 Views
  • 2 replies
  • 0 Likes

Ubuntu Firefox GP Web issue

Dear Team,Does anyone have a problem with GP on Ubuntu 22.04 when using Firefox?Detail: I have an issue when I try to access some websites via Firefox while using GP, Firefox cannot open any of the websites.When I turn off GP, everything is fine.Need some advice.GP version is 6.1, Firefox version is latest, pan-os version is 11.0.0

GlobalProtect Slowness

Hello, I recently started a new job and have been thrown right into the fire. Users are complaining about very slow connections from globalprotect. They get speed tests between 3mbps - 20mbps. Internet speed from ISP is 500Mbps. When I attempt from a speed test site, I get a little over 100Mbps off the network but around 20Mbps when I'm on G...

ce1028 by • L4 Transporter
  • 61900 Views
  • 11 replies
  • 0 Likes

GlobalProtect License (Client and Clientless)

Hi team, I have 2 questions about GP license: 1. No license required if customer need GlobalProtect Client VPN with basic features. But require to purchase GP license for GlobalProtect Clientless VPN. Is my understanding correct? 2. As per checked in Compare NGFW https://www.paloaltonetworks.com/products/product-comparison, PA-1420 suppo...

Global Protect Client causing Windows 10 black login and logout screen

I have installed GP client 6.1.1 and also tried 6.2.1 on several Dell Windows 10 machines with pre-login enabled. I am having an issue as. When the user logs in to Windows they get a black screen for up to 5 mins before Windows explorer actually launches their desktop. Same on logout. I cant seem to figure it out! Seen various things similar ...

Crowdstrike and host-based firewall and Global Protect (resolved)

Hey all,We are working on a large-scale deployment of Palo Alto Global Protect VPN client in a relatively standard Global Protect build/architecture. We do use DNS load-balancing for 2 Portals in different parts of the US, but we have done quite a bit of testing with that all disabled and this issue is clearly unrelated to that.The managed works...

GlobalProtect VPN

Hello,I am currently working in North America and regularly use GlobalProtect VPN to connect to my organization's network without any issues. In the near future, I may need to travel to Pak and continue working remotelyI understand that the Pak government has recently imposed restrictions on VPN usage. This raises concerns about whether GlobalPr...

Global Protect Fills disk until machine crashes; MacOS Sequoia

Running GP 6.3.2-525 on MacOS Sequoia 15.2. GP re-downloads com.paloaltonetworks.GlobalProtect.client.extension.systemextension in a folder in /Library/SystemExtensions/.stagingIt contains about a 6MB files, but it continuously creates new directories and downloads until the filesystem is full. This exact bug also happened with GP 6.2.6-838 o...

Global protect in kiosk mode

Hello, We have a project to deploy Windows laptops in Kiosk mode for a specific group of users. Does anyone here have a use case? How is everyone else using GP in Kiosk mode? Currently, We have 1 gateway for all of our users and use a machine cert with username/password for authentication. I would like to be able to use the same gateway ...

T0MGB0 by • L1 Bithead
  • 1403 Views
  • 2 replies
  • 0 Likes

Welcome to the GlobalProtect Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 555 Views
  • 0 replies
  • 0 Likes

Unable to connet via Global protect and ISE - "Matching client config not found"

Hello, at the moment i'm authenticating users via the local database on palo alto firewall for vpn gp users; what 'id like to do is trying to authenticate vpn users via Cisco Ise. I've configured local users on Ise and what i want to do is that when a user tries to login, ise checks if the user is present in the local group, and if present it se...

MAerre_0-1736505371308.jpeg
MAerre_1-1736505393553.jpeg
MAerre_2-1736505414395.jpeg
MAerre by • L2 Linker
  • 3145 Views
  • 2 replies
  • 0 Likes

GlobalProtect Support for FIDO2 authentication by OS

Hello everyone, I have a question about OS support for FIDO2 authentication using GlobalProtect. Could you please tell me the following about each OS (Win10/Win11/macOS/iPhone/iPad/Android)? 1. Which GP versions support FIDO2 authentication? 2. Is FIDO2 authentication supported by the Embedded Browser or other browsers? I would like an a...

  • 1695 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks