Globalprotect - machine/device cert for Portal and Gateway "certificate profiles" - how to best distribute

I have successfully configured a working POC for exactly how I want our users to connect to Globalprotect.

We have a SAML authentication profile configured for both the Portal and Gateway each each with the same certificate profile configured. 

I

Automatic deployment of GlobalProtect for Mac via Intune

My Company uses Intune for Mac management, and we are trying to automate as many app deployments as we can. Right now, I am hung up on GlobalProtect. I have already created a line-of-business app using the .pkg provided by Paloalto for GlobalProtect.

IOS and Globalprotect using Multifactor authenticator

We are facing a problem on IOS devices related to globalprotect using Multifactor Authenticator with Azure. We tried forming a certificate chain a root certificate and an intermediate certificate.

We added to the root certificate an extra attribute w

SAML authentication - How to avoud the "Open GlobalProtect ..." popup ?

Hi all,

I recently integrated Azure MFA via SAML with GlobalProtect and it works flawless. The only little issue is a popup that always appears whenever the authentication process is about to be completed. I guess this is the browser communicating wi

GlobalProtect software versioning numbers do not make sense to me

Hello - new to the GlobalProtect VPN client.    We are in the processing of beginning to roll out the GP VPN client via GPO to our user base.  I occasionally receive emails from Palo stating that a new version of GP VPN client is available, but when

Global protect upgrade to 6.2.0-89 having disconnection issue

I want ask if anyone face issue with below error after upgrading global protect to 6.2.0-89?

"The network connection is unreachable, or the gateway is unresponsive. Check the network connection and reconnect"

Before upgrade it works fine and no any

GP fail to connect on MAC - web browser can open a page, ping not working

It was working before but than administrator changes certificate.

Now I am trying to activate GP on MAC 14 Sonoma with latest GP 6.02.

I can open portal IP on web browser with my credentials and download latest GP software.

Authentication with user

Global Protect agent background is invisible on some external displays

We've recently gotten reports of two different Macbook Pros running Sonoma with external displays where the GP agent background is invisible / transparent.  The app seems to be working fine, but on certain external displays, it's difficult to use bec

Global Protect is saying it's disconnect but traffic still flows fine.

Having a strange issue since upgrading our PA450 to 10.2.8h3 whereby Global Protect users have an Always on connections the VPN connects as usual then the GP app tells us that the VPN is disconnected but actually the VPN is still connected and users

We currently use Global Protect in On Demand mode and want to automatically connect during logon not pre-logon

We would like our windows based laptops to automatically connect to global protect as part of the login. Is this possible? I see documentation on how to do pre-login but that is not what we desire. 

We are currently using on-demand mode.