GlobalProtect client fails to connect to Gateway when set to SAML authentication

I have spent the last 2 days bashing my head on his without success... We are changing an existing GP VPN from internal Radius authentication (plus other methods) to an external Azure SAML authentication. I have setup a SAML Server Profile and an Aut

User has new password in AD, but GlobalProtect still authenticates with the old password (new password fails).

When our users change their AD password, they immediately will lock & unlock Windows to make sure the new password took, and that what they think they changed it to, is exactly what they changed it to.  They also have been told to sign out of GlobalP

How to block the user in global protect if you enter the wrong user several times

Hello everybody

could someone help me with the following question

How to block the user in global protect if you enter the wrong user several times?

I would like to know if there is a way to block a user for a certain amount of time if you enter the

Default-browser setting overwritten

Our company uses GlobalProtect and I have this working on Linux.  They recently made a change to the settings so that the <default-browser>yes</default-browser> has been removed from pangps.xml.  This has caused some upset as the built-in browser app

Global Protect DNS Issue

Hi Team,

We are facing a weird issue with GP. Random users connecting to GP is being assigned with the Loopback IP(127.0.0.1) as DNS. They have to go to settings and then remove the loopback IP from the DNS only then it starts working. This is not fo

Comp certificate expired, how to allow users to log in

Hi,

Few of my users have not connected to GP (and to AD) for extended period of time and their computer certificate has expired.

They are remote, so coming to office would be problematic - continent-size problematic 

I was under impression, that w

DNS Query Blocking for Remote VPN Users

We have an environment that has a requirement where GP DNS Queries need to be blocked from Remote VPN users if those queries are destined to specific domains A and B (proxy servers). This requirement aims to achieve split-tunneling where a remote VPN

GlobalProtect and Cisco Umbrella Open DNS blocking DNS queries

Hi,

We have circa 500 GlobalProtect clients. Setup is Always-on, network enforcement, SAML auth. In one region we also have Cisco  Umbrella OpenDNS agents installed. This week we started seeing a problem localized to users in 1 country, France, whe

GlobalProtect client verison branches

Can anyone explain the different branch version for GlobalProtect? 

There are currently five different branches available for Win64 - 5.1, 6.0, 6.1, 6.2 and 6.3 - with two different 'preferred' versions (6.1.4, 6.2.3). 

The branches seem unrelated to o

GP - Pre-Login

Hi All,

I have a GP Portal with a few different agent configurations.  Depending on the user's AD group, they may have different settings.  Current setup for all agent configs is Always-On.  I want to enable pre-logon(always on) for a specific use

Global protect gateway

Bonjour,

Pour accéder aux ressources internes il faut configurer un portail sur global protect. Le portail nous permettra de nous connecter à la passerelle.

Pour monter un tunnel ipsec, il faut d'abord se connecter à une passerelle qui se trouve da

Testing 2FA with requiring device certificate and password

Hello All, 

We currently only require Password or certificate when using global protect. We already have device certificates deployed using PKI on our domain computers. 

My question is where do I apply this policy for testing? I notice under client a

GlobalProtect Client Log Dump Format

Hi,

I would like to parse and correlate multiple .log files from GP log dump.

Example log from PanGPS.log