Block Global Protect from certain countries with an exception group

Hi,

Is there any guidance available to implement the ability to block global protect access from specific Countries for most users, but provide the ability to allow some approved users to access Global protect from the blocked countries , say via an A

exceed session closes after ~2 hrs on global protect vpn

We have 10-15 Mold Design users that are complaining that exceed sessions close around 2 hrs even when they are working while on VPN. They loose their work and need to restart and start afresh if the data is not saved.

The virtual adapter was not set up correctly due to a delay - Keeps returning

Hi all, we have been troubled with this issue for the past few years, and have never been able to completely get rid of it.

Every week we get a few machines with the error and have to uninstall, delete the Wbem repository, reinstall which will fix

Palo Alto Vulnerability CVE-2024-8687

Hi Team,

For CVE-2024-8687 we are using PAN OS 10.2.9-H1, but our Global protect version are Vulnerability affected version in this case we need to upgrade the Global protect  to unaffected the version.

GP Settings

I would like to limit the number of VPN sessions as 1 a user can connect to. For example, if I have already connected VPN from laptop A and attempt to connect VPN from laptop B, I want to block connection or terminate existing connection.

Is it possi

Understanding pre-logon logs

I'm trying to understand the global protect logs I am seeing.

I see bad actors from various countries trying to brute force username/passwords. 

I always see 2 logs per attempt. 1 Portal-auth Login Failure, and 1 portal-prelogin before-login succ

Verifying Pre-Logon or User Logged into GP Remotely.

We have some Windows machines on GP that connect via a pre-logon tunnel which then fully connects when the user logs in. We would like to target machines for a specific package installation push only when the VPN is fully connected (i.e. not connecte

Embedded Browser agent does not work in GlobalProtect SAML Authentication

The customer is using PAN-OS 10.2.4-h2, and configuring GlobalProtect agent setting "Use the Default System Browser for SAML Authentication" to "No" does not disable the default system browser for GlobalProtect SAML authentication.

The embedded bro

Global Protect not working with MacOS Sonoma

Hello folks, 

i have a massive issue with GLobalProtect since the MacOS Sonoma Upgrade. It does not connect to the VPN Service. It tries to connect for a minute or so, but than it just says it can not. I don't even get to the part to insert a user

Global Protect Captive Portal allowing defender to see other devices on network

Hi,

Our security team is seeing Windows defender able to probe guest wifi at hotels and see other devices like phones and laptops on the network, until Global Protect can finally connects to one of our gateways. They want the network restricted to

Not able to connect VPN on HP Envy

Every time I try to connect to VPN Global Protect on my HP Envy laptop. It won't allow me to enter my credentials. It's just blank. Please look at the attachment.