This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

LDAP integration with Paloalto

Hello Team, We have global protect configured on prisma that is managed by Panorama. currently our global protect users authenticate by SAML. Now, our requirement is we want LDAP integration so our global protect users can authenticate by LDAP fo connect the GP gateway. how we can achieve this ?

Down a Global Protect Gateway

I was presented with a interesting question. If the inside interface of a Firewall hosting an external GlobalProtect Gateway is down, will the Palo allow users to still connect to that GatewayMy testing has indicated, yes users will connect but be dead in the water because the firewall has no where to send the on-prem traffic.If this is correct...

GlobalProtect UI rendering on Ubuntu

I'm giving the 6.2 client a spin on Ubuntu 22.04 and when using scaled screen resolution (fractional or otherwise) The UI becomes garbled.This is also the case for the new popup when deploying client certificates and the user is prompted for a password.Is this a known issue? I'm not sure if this is/was an issue in earlier versions. I only notice...

Ubuntu 24.04 Frequent Network Restarts After Connecting to VPN with GlobalProtect 6.1

After installing GlobalProtect version 6.1.4 and connecting to the VPN, my device's network frequently restarts. This issue occurs every second, causing the network to start and stop continuously. Details: GlobalProtect Version: 6.1.4 Device: HP Laptop OS: Ubuntu 24.04 Frequency of Issue: Network restarts every second after connecting to the VP...

Best Practices for Global Protect Machine and User Cert Authentication

Hello all, We're looking to implement GlobalProtect for our organization, and I'd like to make sure we follow best practices using certificates for authentication. The only endpoints we need to account for are Windows and a small number of MacOS, and all machines are owned and controlled by our company (no contractor or BYOD devices). To sim...

Andy3989 by • L0 Member
  • 5196 Views
  • 2 replies
  • 0 Likes

Resolved! GP - Split Tunneling

Hello everyone,I have a question about Global Protect and split tunnelling.We are already actively using GP to set up VPN connections. Now we would like to configure a few domains via split tunnelling. Do I really need another GP Gateway licence for this? We have these licences: Do you have some best practise for me? Many Thanks in Advanc...

2024-12-09_07-51-01.png

GlobalProtect 6.2.1 Ubuntu DNS issues

Having the strangest issue on Ubuntu 24.04.1 with GP 6.2.1 Connection works about 75% of the time. Regularly I'm getting an issue where DNS fails to resolve over the VPN tunnel. I've confirmed with wireshark that the DNS requests are being forwarded over the tunnel, but I never get a response. Pinging the IP addresses of hosts over the VPN works...

jamesps by • L1 Bithead
  • 2875 Views
  • 3 replies
  • 0 Likes

Exclude Device from HIP check

Hello,I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.My question is if there is a way to exclude a device from this HIP check and it would be allowed to connect and have access to the domain?Thank you in advance,Tom

thoffman by • L2 Linker
  • 4682 Views
  • 5 replies
  • 1 Likes

Internal host Detection and cookie authentication override on portal/gateway

Hello, I configured prisma access with GP Portal + External gateway and pre-logon always-on with Enforced Global protect Connection for Network Access, and also enable Internal host detection and cookie authentication override on both portal/gateway. I have a question about process priority of IHD and cookie authentication override when user...

Device Block List for GlobalProtect - where is it in v10.x?

Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...

GlobalProtect Group Mapping for Azure SAML

Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...

global protect ipv6 support

hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...

nevolex by • L3 Networker
  • 2330 Views
  • 1 replies
  • 0 Likes
  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks