This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Default Browser setting lost after auto-update

Hi everyone,I recently migrated our implementation over to using SAML for our on-demand VPN users, and due to issues with our IDP/auth method and the embedded browser on Windows (namely that we use many smart cards for auth, and the embedded browser/edge view seems to constantly "remember" the wrong cert, which users cannot easily clear), I have...

Always-ON VPN VS Enforcing VPN for internal/external network access

Im trying to figure out which is the easiest path to setup and what makes most sense for my company. Basically, I need to find a way to prevent devices that goes off premises from browsing the internet without vpn. would like one that is less disruptive to users. IT seems as both of these would do what i want, but would like a more high-level pe...

Cha_Moua by • L1 Bithead
  • 2262 Views
  • 2 replies
  • 0 Likes

Enforce Global protect

Hi Everyone, I have a query on Global Protect. Requirement : one of our customer wants the requirement if user is working from home internet should only work on his laptop if he is connected to global protect if user is not connected to global protect his internet should not work even if he is connected to wifi also. All his traffic should pas...

Resolved! GlobalProtect pre-deployment with enforcement control

We are preparing the rollout of our Prisma Access with new GP agent deployment on notebooks. Could we enable the enforcement setting during the installation rather than download from portal? All new machines will be pre-installed the agent and we can't control when will the setting can sync with the portal for the new machine. Thanks. Can we a...

Global Protect Android connection problem

After upgrading PA from 9.1.1 to new version 11.1.4-h1 Some android devices cant connect GP vpn.Some old android versions connect without problem. GlobalProtect: Connection Failed. The network is unreachable or the portal is unresponsive. Check the network connection and reconnect. On windows it works perfectly. I have active licence. Date ...

Resolved! Global Connect - Reverse VPN

We have been asked to connect to a customer using GlobalProtect, but are concerned about the possible risk of VPN reverse tunnel.Is there a control in the software to restrict this and protect our network? (is it even a thing with GlobalProtect?)Currenty we have no experience with GlobalProtect and have little knowledge of its functionality or l...

AllDay by • L0 Member
  • 1618 Views
  • 1 replies
  • 0 Likes

Resolved! Matching client config not found

I have a user trying to connect via Global Protect from a Win 11 client. The error is "matching client config not found". I have no issues at all connecting as that same user from a Win 10 client. Also we use Mini Orange for MFA which sends an SMS code to the user.

Resolved! Global protect configuration on Ipad and Iphone devices and Firewall configuration

Hi all, I have been consulting with TAC to configure Global protect for IOS devices (ipad, iphone), I use the same certificate that we use for PCs and it works correctly on PCs but on ipad and Iphone it does not work.I would like to ask if anyone knows how to configure this, what should I take into account in these configurations, or any KB that...

Global Protect Auth Failure after FW upgraded to 11.2.4-h1

Hello, We upgraded our firewalls to 11.2.4-h1 to patch the critical vulnerability recently discovered. We use Global Protect with AO VPN and enforce network connection. A problem we are seeing this morning is when our Global Protect clients are attempting to authenticate, either nothing happens for most of our staff or the ones that prompt...

global protect with SAML SSO authentication failed

after upgrading to gp client 6.2.6, we are facing authentication failed issue with few users. user clicks to connect and then embedded browser shows error " authentication failed". log shows " Authentication failed: empty password'" GPS logs shows the following. :07:27:816 ----Portal Login starts----(P6128-T9092)Debug(10551): 12/13/24 14:0...

PAPAPA by • L1 Bithead
  • 2531 Views
  • 2 replies
  • 0 Likes

Resolved! Portal access lost while connected to external gateway

This is a GP configuration that works, but the portal doesn't respond to web requests from the client while the client is connected to the gateway. There is only an external gateway. The portal and gateway share the same IP on an Internet-facing interface. Clients connect and work fine, but as a result when a user initiates an upgrade of the cli...

What is the expected behavior in GlobalProtect pre-login with a single gateway?

I am playing around with a new GlobalProtect configuration, using a pre-login always-on configuration with a single gateway. The pre-login VPN works fine. My understanding is that when a user logins into the PC, the tunnel is supposed to rename itself to the user name. The userID associated with traffic from the endpoint changes to the user, but...

  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks