This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! GP - Split Tunneling

Hello everyone,I have a question about Global Protect and split tunnelling.We are already actively using GP to set up VPN connections. Now we would like to configure a few domains via split tunnelling. Do I really need another GP Gateway licence for this? We have these licences: Do you have some best practise for me? Many Thanks in Advanc...

2024-12-09_07-51-01.png

GlobalProtect 6.2.1 Ubuntu DNS issues

Having the strangest issue on Ubuntu 24.04.1 with GP 6.2.1 Connection works about 75% of the time. Regularly I'm getting an issue where DNS fails to resolve over the VPN tunnel. I've confirmed with wireshark that the DNS requests are being forwarded over the tunnel, but I never get a response. Pinging the IP addresses of hosts over the VPN works...

jamesps by • L1 Bithead
  • 2586 Views
  • 3 replies
  • 0 Likes

Exclude Device from HIP check

Hello,I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.My question is if there is a way to exclude a device from this HIP check and it would be allowed to connect and have access to the domain?Thank you in advance,Tom

thoffman by • L2 Linker
  • 4458 Views
  • 5 replies
  • 1 Likes

Internal host Detection and cookie authentication override on portal/gateway

Hello, I configured prisma access with GP Portal + External gateway and pre-logon always-on with Enforced Global protect Connection for Network Access, and also enable Internal host detection and cookie authentication override on both portal/gateway. I have a question about process priority of IHD and cookie authentication override when user...

Device Block List for GlobalProtect - where is it in v10.x?

Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...

GlobalProtect Group Mapping for Azure SAML

Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...

global protect ipv6 support

hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...

nevolex by • L3 Networker
  • 2215 Views
  • 1 replies
  • 0 Likes

Remoteapp through Global Protect VPN

Hi, I am trying to grant access for my users on my PA-220 to application through RDP Remoteapp windows funcionality from VPN Global Protect. I managed to make it work in any other zone but that one. Current rule is set up to allow applications MS-RDP and SSL from VPN to LAN and as far as I know it should be sufficient, but I get an error saying:...

Resolved! Where can i download Globalprotect client

Hi, I want to download the Globalprotect cleint but i cannot find it. Usually i donwload it from the Customer Support Portal, under Updates / Software updates, but from somes days, i have nothing in that section. Our portal login pages in our global protect portal are disable. Anyone knows where i can find all globalprotect version client ? Th...

CHARRIER by • L2 Linker
  • 3361 Views
  • 2 replies
  • 0 Likes

Unable to retrieve latest GlobalProtect App

I'm looking for help with downloading GlobalProtect for Ubuntu. I'm following steps over here . When trying to register the device I get error "Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the appropriate Support Account." Please help to resolve this error.

Global Protect Connection Issue

Gents,My scenario: Currently: While I am in Canada, I can use Global Protect client to log in to my company portal without any issue. AFAIK, it ensures my IP range is within Canada.Issue: I am travelling to different country. Now, if I use GP Client, it says "Connection Failed - the network connection is un-reachable or the gateway is unresponsi...

Resolved! Global Protect User Login

Hello, Is there a way to control the Global Protect login? I want to have when a user disconnects from GP, the next time user logs in they get prompted for MFA. As of now, seems user can disconnect/reconnect repeatedly thru out the day and never get prompted with MFA. How/where do I fix this? Thanks Rich

rcraxton by • L2 Linker
  • 4465 Views
  • 11 replies
  • 0 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks