Is there a way to exclude mobile devices from the always on VPN? I enabled always on and it worked great for computers but it threw our phones using GP into chaos.
Having the strangest issue on Ubuntu 24.04.1 with GP 6.2.1 Connection works about 75% of the time. Regularly I'm getting an issue where DNS fails to resolve over the VPN tunnel. I've confirmed with wireshark that the DNS requests are being forwarded over the tunnel, but I never get a response. Pinging the IP addresses of hosts over the VPN works...
Hello,I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.My question is if there is a way to exclude a device from this HIP check and it would be allowed to connect and have access to the domain?Thank you in advance,Tom
Is there a way to perform check / enforce endpoint to have a specific version of GP rules ?
Hello, I configured prisma access with GP Portal + External gateway and pre-logon always-on with Enforced Global protect Connection for Network Access, and also enable Internal host detection and cookie authentication override on both portal/gateway. I have a question about process priority of IHD and cookie authentication override when user...
Is there a way to setup an alert for when clients exhausted the Client IP pool or are close?
Both this: https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/host-information/block-device-access and HELP indicate an DEVICE BLOCK LIST available for GlobalProtect. When in the FW GUI I should see it in the GlobalProtect menu. It does NOT show up. Even with version 10.1 I click HELP and it says it should be there but not...
Hi All, I have configured Azure with Global protect enterprise application for SAML and configured the Group claim attribute as "group -> user.group" which as 3 usergroups Sales, IT , and Developers. And in the Palo alto firewall (10.2.8), SAML and Authentication profile is configured. Can any one brief me how to configure the Group m...
hi everyone, I have GP configured for ipv4, it works (I also have both ipv4 and ipv6 addresses delivered via dynamic assignments from the isp for the internet link) in the configuration if GP I use "none" under the IP assignments for ipv4 as I guess I have nothing to chose from since it's dynamic anyway. however when I add ipv6 settings to G...
Hi, I am trying to grant access for my users on my PA-220 to application through RDP Remoteapp windows funcionality from VPN Global Protect. I managed to make it work in any other zone but that one. Current rule is set up to allow applications MS-RDP and SSL from VPN to LAN and as far as I know it should be sufficient, but I get an error saying:...
Hi, I want to download the Globalprotect cleint but i cannot find it. Usually i donwload it from the Customer Support Portal, under Updates / Software updates, but from somes days, i have nothing in that section. Our portal login pages in our global protect portal are disable. Anyone knows where i can find all globalprotect version client ? Th...
Gents,My scenario: Currently: While I am in Canada, I can use Global Protect client to log in to my company portal without any issue. AFAIK, it ensures my IP range is within Canada.Issue: I am travelling to different country. Now, if I use GP Client, it says "Connection Failed - the network connection is un-reachable or the gateway is unresponsi...
Hello, Is there a way to control the Global Protect login? I want to have when a user disconnects from GP, the next time user logs in they get prompted for MFA. As of now, seems user can disconnect/reconnect repeatedly thru out the day and never get prompted with MFA. How/where do I fix this? Thanks Rich
I'm looking to use Azure traffic manager to create a high availability setup with two globalprotect portals. Traffic manager monitors the URL of the Palo Alto to determine whether it is up and should be servicing clients. I'm not sure what URL to use in the configuration. I've tried pa1.domain.com and pa1.domain.com/global-protect/login.esp (...
Hi. I'm using GlobalProtect App Version 6.1.1-5. It often to get into this never-ending cycle of "Finding the Best Available Gateway". I try to "Refresh Connection" which does nothing: There doesn't seem to be a "Cancel" button to try to reinitiate the connection or restart the GlobalProtect client. I usually have to execute the following c...
MP18
on:
GPVPN Issue
MP18
on:
Pre-Logon Behavior with SAML Login
Raido_Rattameis
TomYoung
on:
The GlobalProtect mobile versions available on the App Store and Play Store are different. What is the reason for this?
| User | Likes Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
