This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect Internal Detection

Hi all, We are experiencing an intermittent connectivity issue on our Corp Wi‑Fi, and I’m trying to determine whether this is related to GlobalProtect internal network detection. Environment GlobalProtect Always‑On No split tunnelling Internal Host Detection configured using the IP address and hostname of a Domain Controller Corp Wi‑Fi uses RAD...

M.Marzin by • L0 Member
  • 1352 Views
  • 1 replies
  • 0 Likes

Conflict between Global Protect and RedSky MyE911 application

Hello,We have thousands computers with installed RedSky MyE911.Installation of this app is mandatory on our computers (it is federal low).We did not have a problem with this app when used Cisco Security Client VPN but now, after installation of Global Protect VPN we have a problem.RedSky MyE911 is started automatically (when Windows started), be...

azelenin by • L0 Member
  • 1460 Views
  • 3 replies
  • 0 Likes

GlobalProtect 6.1.11-175 Connection Issues

I am using GlobalProtect version 6.1.11-752 on my iPhone. I frequently have to tap the connect button multiple times before it successfully connects. Additionally, the connection wait time often exceeds 10 seconds (sometimes even longer), whereas it usually takes only 2–3 seconds to connect. Has anyone else encountered this issue? Are there any ...

klec_he by • L1 Bithead
  • 2466 Views
  • 5 replies
  • 0 Likes

Rollout Strategy: GlobalProtect Disconnect Comments + 12-Hour Auto-Reconnect

We are planning a global rollout of two specific GlobalProtect configurations and need your "battle-tested" advice on the following combination: Mandatory Disconnect Reasons: Users must provide a comment to disconnect. 24-Hour Auto-Reconnect: Using a 1440-minute (24hr) Disable Timeout to force reconnection daily. Key Challenges & Conce...

Potential False Positive IoC

Hello everyone! I'm Arsen, Junior SOC Analyst and I've got some questions regarding the detection Evasive HTTP C2 Traffic Detection(89950). Recently, I have received several alerts, where the Destination IP was 91.108.56.132, which is related to AS 62014 (T. Messenger Inc). The user claimed that he used a T. Desktop Application and it seems to b...

Portal/Gateway certificate renewals - automation?

Greetings With the continued push for shorter and shorter SSL certificate validation periods coming rapidly to a head (in case you missed it - maximum SSL certificate validity is now 200 days, will go down to 100 days in March 2027, and 47 days in 2029), I'm looking for a way to automate SSL certificate renewals on my Global Protect gateways/p...

darren_g by • L4 Transporter
  • 1324 Views
  • 2 replies
  • 0 Likes

GlobalProtect 6.2.8-h8(6.2.8-814) has been removed from the Support Portal

Hey Team, I just wanted to make a quick post advising everyone that GlobalProtect 6.2.8-h8(6.2.8-814) has been removed from the Support Portal due to known compatibility issues with macOS 26.3.1 users. Please remove this from your environments if you meet this criteria to avoid any outages. We will have an official release with additional info...

Microsoft Teams client - IP of GP network adapter impacting location-based emergency calling

When at campus our Teams clients are associated with the GP interface IP, which is causing an issue with our dynamic emergency calling that utilizes subnets and WAPs to provide 911 dispatch the proper location of the caller (Ray Baums Act). We have split-tunnel to the Microsoft Teams IP ranges, but the local Teams client is still associating wi...

Resolved! Palo Alto Global Protect clients failing to connect intermittently

We have Global Protect installed on all of our corporate laptops and our users fall into one of two scenarios:1. They are a remote user; cannot reach the host we have defined for Internal Host Detection and are required to authenticate to the Gateway with DUO.2. They are an "on-site" and can reach the host we set for Internal Host Detection and ...

Assign private IP address failed

We buy GlobalProtect VPN as a service from a third party, for 1000+ users, and though the service worked well for some months our users have been plagued by login issues since the Christmas/New Year break - something changed, but we don't know what. The issue is that login fails with "Assign Private IP address failed". It's difficult to estimate...

Disconnect Internally but not remotely

We have some users who need to connect to part of our network that isn't routable which means GP cannot connect when they are plugged into it. In order for them to do their work, they need to be able to disconnect from GP. I am wondering if there is a setup where if the user is on the internal network and connected to an internal gateway, th...

Resolved! Pre-Populate Multipule Portal Addresses

I would like to know if there is a way to setup the .msi file to pre-populate the portal ip addresses for my users.I found this kb article on how to set it up (How to predefine Global Protect portal address using Microsoft ... - Knowledge Base - Palo Alto Networks), but I have multipule portals I need to add. This only has instructions for a si...

M.Maus by • L1 Bithead
  • 2990 Views
  • 2 replies
  • 0 Likes

global protect connection failed authentication failed !!!

Hi All, We are currently experiencing the following error when attempting to log into Global Protect ( screenshot attached ). Curiously this is happening after getting prompted via Duo . We are using SAML Identity provider for authentication via DUO . All was working fine until yesterday . The last relevant Global Protect logs make reference...

HThiam_0-1770847291006.png
H.Thiam by • L2 Linker
  • 1874 Views
  • 3 replies
  • 0 Likes

New cert GP cert prompt for people testing Yubikeys for windows logon

Some of our IT team is beta testing Yubikeys for Windows Active Directory login. All the appropriate GPO's and CA templates have been created and just a small number of Yubikeys are setup for some IT people. While this works on the windows lock screen and a few other things we are testing like Entra Admin, etc... (plug in, type in pin, tap i...

ksauer507 by • L3 Networker
  • 1402 Views
  • 2 replies
  • 0 Likes

Resolved! Geo blocking after GP login

My customer wants to give access based on user group and geo location.Once authenticated the source IP is from the GP-tunnel ip-pool.Can we still determine the source country once the tunnel is setup, or do we need to make that determination, after authentication and before completing the tunnel setup?

CHKlomp by • L2 Linker
  • 2621 Views
  • 2 replies
  • 0 Likes
  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks