This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Internal host Detection and cookie authentication override on portal/gateway

Hello, I configured prisma access with GP Portal + External gateway and pre-logon always-on with Enforced Global protect Connection for Network Access, and also enable Internal host detection and cookie authentication override on both portal/gateway. I have a question about process priority of IHD and cookie authentication override when user...

Device Block List for GlobalProtect - where is it in v10.x?

Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...

GlobalProtect Group Mapping for Azure SAML

Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...

global protect ipv6 support

hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...

nevolex by • L3 Networker
  • 2303 Views
  • 1 replies
  • 0 Likes

Remoteapp through Global Protect VPN

Hi, I am trying to grant access for my users on my PA-220 to application through RDP Remoteapp windows funcionality from VPN Global Protect. I managed to make it work in any other zone but that one. Current rule is set up to allow applications MS-RDP and SSL from VPN to LAN and as far as I know it should be sufficient, but I get an error saying:...

Resolved! Where can i download Globalprotect client

Hi, I want to download the Globalprotect cleint but i cannot find it. Usually i donwload it from the Customer Support Portal, under Updates / Software updates, but from somes days, i have nothing in that section. Our portal login pages in our global protect portal are disable. Anyone knows where i can find all globalprotect version client ? Th...

CHARRIER by • L2 Linker
  • 3730 Views
  • 2 replies
  • 0 Likes

Global Protect Connection Issue

Gents,My scenario: Currently: While I am in Canada, I can use Global Protect client to log in to my company portal without any issue. AFAIK, it ensures my IP range is within Canada.Issue: I am travelling to different country. Now, if I use GP Client, it says "Connection Failed - the network connection is un-reachable or the gateway is unresponsi...

Resolved! Global Protect User Login

Hello, Is there a way to control the Global Protect login? I want to have when a user disconnects from GP, the next time user logs in they get prompted for MFA. As of now, seems user can disconnect/reconnect repeatedly thru out the day and never get prompted with MFA. How/where do I fix this? Thanks Rich

rcraxton by • L2 Linker
  • 4840 Views
  • 11 replies
  • 0 Likes

Monitor if Globalprotect portal is up

I'm looking to use Azure traffic manager to create a high availability setup with two globalprotect portals. Traffic manager monitors the URL of the Palo Alto to determine whether it is up and should be servicing clients. I'm not sure what URL to use in the configuration. I've tried pa1.domain.com and pa1.domain.com/global-protect/login.esp (...

GlobalProtect never-ending "Finding the Best Available Gateway"

Hi. I'm using GlobalProtect App Version 6.1.1-5. It often to get into this never-ending cycle of "Finding the Best Available Gateway". I try to "Refresh Connection" which does nothing: There doesn't seem to be a "Cancel" button to try to reinitiate the connection or restart the GlobalProtect client. I usually have to execute the following c...

image.png
janicex by • L0 Member
  • 12179 Views
  • 5 replies
  • 0 Likes

GP on Android - The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect

Hi, We get an error "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." while connecting to GP with an agent installed on Android device. The thing is that some Android devices works fine while other get this error. We can't say where is the problem exactly (it seem to be within the ...

AmitKa79 by • L2 Linker
  • 10743 Views
  • 10 replies
  • 0 Likes

Global Protect / Vodafone / Germany

Since around Jul/Aug 2024, our users in Germany using Vodafone broadband connections have started to have problems accessing public web-sites over Global Protect, routing via our Data Centre Firewalls which have SSL-decryption enabled. All web access fails and in the logs we see "decrypt-unsupport-param". If the user switches to a non-Voda...

Global Protect Brute Force

Hello, I have see this discussed a bit but was wondering if there is any way to prevent a brute force attack on the VPN gateway. I have disabled the portal page and set up a vulnerability policy but that does not seem to get triggered I also have edl policies. We are using 2-factor so I think it is secure but I would like to prevent this if po...

  • 1683 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks