Is there a way to setup an alert for when clients exhausted the Client IP pool or are close?
Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...
Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...
hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...
Hi, I am trying to grant access for my users on my PA-220 to application through RDP Remoteapp windows funcionality from VPN Global Protect. I managed to make it work in any other zone but that one. Current rule is set up to allow applications MS-RDP and SSL from VPN to LAN and as far as I know it should be sufficient, but I get an error saying:...
Hi, I want to download the Globalprotect cleint but i cannot find it. Usually i donwload it from the Customer Support Portal, under Updates / Software updates, but from somes days, i have nothing in that section. Our portal login pages in our global protect portal are disable. Anyone knows where i can find all globalprotect version client ? Th...
I'm looking for help with downloading GlobalProtect for Ubuntu. I'm following steps over here . When trying to register the device I get error "Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the appropriate Support Account." Please help to resolve this error.
Gents,My scenario: Currently: While I am in Canada, I can use Global Protect client to log in to my company portal without any issue. AFAIK, it ensures my IP range is within Canada.Issue: I am travelling to different country. Now, if I use GP Client, it says "Connection Failed - the network connection is un-reachable or the gateway is unresponsi...
Hello, Is there a way to control the Global Protect login? I want to have when a user disconnects from GP, the next time user logs in they get prompted for MFA. As of now, seems user can disconnect/reconnect repeatedly thru out the day and never get prompted with MFA. How/where do I fix this? Thanks Rich
I'm looking to use Azure traffic manager to create a high availability setup with two globalprotect portals. Traffic manager monitors the URL of the Palo Alto to determine whether it is up and should be servicing clients. I'm not sure what URL to use in the configuration. I've tried pa1.domain.com and pa1.domain.com/global-protect/login.esp (...
Hi. I'm using GlobalProtect App Version 6.1.1-5. It often to get into this never-ending cycle of "Finding the Best Available Gateway". I try to "Refresh Connection" which does nothing: There doesn't seem to be a "Cancel" button to try to reinitiate the connection or restart the GlobalProtect client. I usually have to execute the following c...
Hi, We get an error "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." while connecting to GP with an agent installed on Android device. The thing is that some Android devices works fine while other get this error. We can't say where is the problem exactly (it seem to be within the ...
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POGfCAO Is it possible to have 2 Authentication profiles with Any OS on Global protect portal and gateway? Any updates on the topic ?
Is there a way to validate the user who logged into the page using the SESSID and GP_SESSION_CK information? Currently, I have the portal (/global-protect/portal/portal.esp) active with some internal applications. I log in via SSO SAML.My question is: is it possible to retrieve the username using the SESSID and GP_SESSION_CK information? Does an...
Since around Jul/Aug 2024, our users in Germany using Vodafone broadband connections have started to have problems accessing public web-sites over Global Protect, routing via our Data Centre Firewalls which have SSL-decryption enabled. All web access fails and in the logs we see "decrypt-unsupport-param". If the user switches to a non-Voda...
BPry
on:
Semi-Disable Global Protect on Mac
reaper
on:
auth override cookie in Globalprotect
