This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Brute Force Attack protection on GlobalProtect Portal Page isn't getting triggered

- We have a Vulnerability Protection for threat ID 40017 SSL VPN Authentication Brute Force Attempt in place. - With default Time attribute as 10 hits per 60 seconds, action as Block IP and have called in the security policy but it is not being triggered. - reference https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJ2...

Users unable to access shared drives when on Global Protect

We're not sure when this started but recently when users are on Global Protect they are prompted to enter a username and password when connecting to a shared drive on a file server. There is a policy that allows access to port 445 to the server for the users group. A test group that has no policies applied there are no issues. From the logs ...

Global Protect Client Install

I have a Google Shared Drive in my organization's Google Workspaces with all of the various GPVPN client installation files (Windows, Linux, MacOS, Android). I would like to automate a quarterly replacement of each installation file with the latest version. Has anyone done this? I'm wondering if PAN has an API that I could use to launch a ...

heartlje by • L0 Member
  • 1045 Views
  • 1 replies
  • 0 Likes

Global protect A valid client cert is required

Hi, we're having a couple of issues with users after our security team updated firewall and GP client to v6.2.6 whereby a few of them are getting the error message attached all of the sudden stating that a valid cert is required. We do not use OID and I suspect the client is just picking up the wrong cert but I cannot get the client to prompt us...

image.png
gus0095 by • L0 Member
  • 4538 Views
  • 1 replies
  • 0 Likes

Resolved! FDESetup popup after Global Protect client update on macOS

Hello everyone, After users update the Global Protect VPN client from version 6.2.4 to 6.2.5, all users get "fdesetup" popup on their macOS devices, please see the attached. It does not matter if the user clicks OK or "Don't Allow", the popup comes back again and again and it is annoying. And by clicking OK, it actually does not encrypt the ...

GlobalProtect blocks access to internet when connected

Hi there,I have recently started a new job at a remote company. The company is using GlobalProtect VPN for anyone who wants to access their resources. So, I have installed the VPN following the documentation provided and connected successfully but now I can't access my internet through my browser. All pages are blocked showing me "This site can'...

Global protect access issue with adm account

Hi, We have issues right now on the users with _adm account accessing the server while connected to GP. Here's the scenario: 1. User connect to GP using normal ad account 2. User is connected to GP 3. User will try to access server via RDP 4. User will input his/her _adm credential on the server 5. Upon checking the firewall level, user are...

GlobalProtect CBL woes on Windows 11

I am having a lot of issues getting CBL to work with latest Windows 11 and a 6.2.x GP client. I followed the instructions:Deploy Connect Before Logon Settings in the Windows Registry And here is what happens: 1. The network sign-in button on Windows login screen, sometimes is there and sometimes it's not. I restart the machine multiple times...

cierech by • L0 Member
  • 1904 Views
  • 0 replies
  • 1 Likes

Globalprotect traffic translated to port 20077

Hi Team, in our test env I have a firewall with GP config. I would like to NAT the GP traffic to a loopback interface. Original destination port is 50443 and a NAT rule is set up to translate it to 443 (and the dest address as well...) However, if I send a connection request from client it reports that the portal is unavailable. From the firewal...

mkukucska_0-1716826769652.png
mkukucska_1-1716826853298.png
mkukucska_2-1716826899211.png

Resolved! GlobalProtect FIDO2 Support and Browser Issues

Hello everyone, Could you tell me about the following? 1. Is FIDO2 authentication supported by Global Protect? *According to the following website, it appears to be supported. https://docs.paloaltonetworks.com/whats-new/new-features/june-2024/gp-webview2-63 2. If FIDO2 authentication by Global Protect is supported, what versions of the Globa...

Share GlobalProtec conection on Windows Server

It is possibile to "share" GP connection on windows server? Our customer use a Terminal Server to allow external connection and after the first GP VPN connection, if a second user try to connect a second VPN, GP kill the first one. With other VPN programs (fortinet etc), this sharing is permitted. Regards.

Casoni by • L0 Member
  • 1218 Views
  • 2 replies
  • 0 Likes

Resolved! Add multiple authentication profiles (assigned to different user groups) to Global Protect VPN

We are looking to convert our default authentication profile from RADIUS w/DUO MFA to SAML (Azure) w/DUO MFA. The client would like to test the new solution with just the internal IT team while normal users maintain the old authentication method. Is there a way to add a second authentication profile to the Global Protect Gateway & Portal whi...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks