GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Device Block List for GlobalProtect - where is it in v10.x?

Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...

GlobalProtect Group Mapping for Azure SAML

Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...

global protect ipv6 support

hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...

nevolex by L3 Networker
  • 2181 Views
  • 1 replies
  • 0 Likes

Remoteapp through Global Protect VPN

Hi, I am trying to grant access for my users on my PA-220 to application through RDP Remoteapp windows funcionality from VPN Global Protect. I managed to make it work in any other zone but that one. Current rule is set up to allow applications MS-RDP and SSL from VPN to LAN and as far as I know it should be sufficient, but I get an error saying:...

Resolved! Where can i download Globalprotect client

Hi, I want to download the Globalprotect cleint but i cannot find it. Usually i donwload it from the Customer Support Portal, under Updates / Software updates, but from somes days, i have nothing in that section. Our portal login pages in our global protect portal are disable. Anyone knows where i can find all globalprotect version client ? Th...

CHARRIER by L2 Linker
  • 3219 Views
  • 2 replies
  • 0 Likes

Unable to retrieve latest GlobalProtect App

I'm looking for help with downloading GlobalProtect for Ubuntu. I'm following steps over here . When trying to register the device I get error "Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the appropriate Support Account." Please help to resolve this error.

Global Protect Connection Issue

Gents,My scenario: Currently: While I am in Canada, I can use Global Protect client to log in to my company portal without any issue. AFAIK, it ensures my IP range is within Canada.Issue: I am travelling to different country. Now, if I use GP Client, it says "Connection Failed - the network connection is un-reachable or the gateway is unresponsi...

Resolved! Global Protect User Login

Hello, Is there a way to control the Global Protect login? I want to have when a user disconnects from GP, the next time user logs in they get prompted for MFA. As of now, seems user can disconnect/reconnect repeatedly thru out the day and never get prompted with MFA. How/where do I fix this? Thanks Rich

rcraxton by L2 Linker
  • 4275 Views
  • 11 replies
  • 0 Likes

Monitor if Globalprotect portal is up

I'm looking to use Azure traffic manager to create a high availability setup with two globalprotect portals. Traffic manager monitors the URL of the Palo Alto to determine whether it is up and should be servicing clients. I'm not sure what URL to use in the configuration. I've tried pa1.domain.com and pa1.domain.com/global-protect/login.esp (...

GlobalProtect never-ending "Finding the Best Available Gateway"

Hi. I'm using GlobalProtect App Version 6.1.1-5. It often to get into this never-ending cycle of "Finding the Best Available Gateway". I try to "Refresh Connection" which does nothing: There doesn't seem to be a "Cancel" button to try to reinitiate the connection or restart the GlobalProtect client. I usually have to execute the following c...

image.png
janicex by L0 Member
  • 10731 Views
  • 5 replies
  • 0 Likes

GP on Android - The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect

Hi, We get an error "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." while connecting to GP with an agent installed on Android device. The thing is that some Android devices works fine while other get this error. We can't say where is the problem exactly (it seem to be within the ...

AmitKa79 by L2 Linker
  • 9978 Views
  • 10 replies
  • 0 Likes

Validate access credentials

Is there a way to validate the user who logged into the page using the SESSID and GP_SESSION_CK information? Currently, I have the portal (/global-protect/portal/portal.esp) active with some internal applications. I log in via SSO SAML.My question is: is it possible to retrieve the username using the SESSID and GP_SESSION_CK information? Does an...

Global Protect / Vodafone / Germany

Since around Jul/Aug 2024, our users in Germany using Vodafone broadband connections have started to have problems accessing public web-sites over Global Protect, routing via our Data Centre Firewalls which have SSL-decryption enabled. All web access fails and in the logs we see "decrypt-unsupport-param". If the user switches to a non-Voda...

Global Protect Brute Force

Hello, I have see this discussed a bit but was wondering if there is any way to prevent a brute force attack on the VPN gateway. I have disabled the portal page and set up a vulnerability policy but that does not seem to get triggered I also have edl policies. We are using 2-factor so I think it is secure but I would like to prevent this if po...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels