This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect Split Tunneling with multiple network adapters

Hey community, We are struggling with a certain case for many of our customers. We have many users working in service who connect to #GlobalProtect with their Windows notebooks via mobile data to #Prisma Cloud. From there, they access the internet or internal resources. We have some bypassed decryption rules. For their work, they need to conne...

GlobalProtect app being automatically uninstalled as PC moves from one LAN to another LAN

Hello All,I've got one PC out of a couple dozen, that's experiencing this issue. Details: The end-User works remotely 90% of the time from his home office; using the GP app (64bit version 6.1.4-711) every day. Once a week he comes into the main office. (He doesn't need to use the GP app in there). All is well/normal in both environments rela...

macOS and slow download speeds after GP 6.0.10

Hi everyone, I'm reaching out for some assistance. We are a fully Mac-based environment with Global Protect configured for always-on using certificates for authentication. Most of our GP clients are running version 6.0.7 or earlier, and with these versions, download speeds are not an issue, regardless of the macOS version. However, once we u...

Brute Force Attack protection on GlobalProtect Portal Page isn't getting triggered

- We have a Vulnerability Protection for threat ID 40017 SSL VPN Authentication Brute Force Attempt in place. - With default Time attribute as 10 hits per 60 seconds, action as Block IP and have called in the security policy but it is not being triggered. - reference https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJ2...

Users unable to access shared drives when on Global Protect

We're not sure when this started but recently when users are on Global Protect they are prompted to enter a username and password when connecting to a shared drive on a file server. There is a policy that allows access to port 445 to the server for the users group. A test group that has no policies applied there are no issues. From the logs ...

Global Protect Client Install

I have a Google Shared Drive in my organization's Google Workspaces with all of the various GPVPN client installation files (Windows, Linux, MacOS, Android). I would like to automate a quarterly replacement of each installation file with the latest version. Has anyone done this? I'm wondering if PAN has an API that I could use to launch a ...

heartlje by • L0 Member
  • 1123 Views
  • 1 replies
  • 0 Likes

Global protect A valid client cert is required

Hi, we're having a couple of issues with users after our security team updated firewall and GP client to v6.2.6 whereby a few of them are getting the error message attached all of the sudden stating that a valid cert is required. We do not use OID and I suspect the client is just picking up the wrong cert but I cannot get the client to prompt us...

image.png
gus0095 by • L0 Member
  • 5029 Views
  • 1 replies
  • 0 Likes

Resolved! FDESetup popup after Global Protect client update on macOS

Hello everyone, After users update the Global Protect VPN client from version 6.2.4 to 6.2.5, all users get "fdesetup" popup on their macOS devices, please see the attached. It does not matter if the user clicks OK or "Don't Allow", the popup comes back again and again and it is annoying. And by clicking OK, it actually does not encrypt the ...

GlobalProtect blocks access to internet when connected

Hi there,I have recently started a new job at a remote company. The company is using GlobalProtect VPN for anyone who wants to access their resources. So, I have installed the VPN following the documentation provided and connected successfully but now I can't access my internet through my browser. All pages are blocked showing me "This site can'...

Global protect access issue with adm account

Hi, We have issues right now on the users with _adm account accessing the server while connected to GP. Here's the scenario: 1. User connect to GP using normal ad account 2. User is connected to GP 3. User will try to access server via RDP 4. User will input his/her _adm credential on the server 5. Upon checking the firewall level, user are...

GlobalProtect CBL woes on Windows 11

I am having a lot of issues getting CBL to work with latest Windows 11 and a 6.2.x GP client. I followed the instructions:Deploy Connect Before Logon Settings in the Windows Registry And here is what happens: 1. The network sign-in button on Windows login screen, sometimes is there and sometimes it's not. I restart the machine multiple times...

cierech by • L0 Member
  • 2087 Views
  • 0 replies
  • 1 Likes

Globalprotect traffic translated to port 20077

Hi Team, in our test env I have a firewall with GP config. I would like to NAT the GP traffic to a loopback interface. Original destination port is 50443 and a NAT rule is set up to translate it to 443 (and the dest address as well...) However, if I send a connection request from client it reports that the portal is unavailable. From the firewal...

mkukucska_0-1716826769652.png
mkukucska_1-1716826853298.png
mkukucska_2-1716826899211.png
  • 2079 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks