This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

SAML Authentication into GlobalProtect

We started using SAML to authentication into GlobalProtect connected back through Entra. The problem is the user will be prompted to put in their windows credentials the first time they login, but say they disconnect and go to log back in to VPN it bypasses the step where they have to put in the credentials entirely and logs them in. How do we m...

A.Goble by • L0 Member
  • 1127 Views
  • 1 replies
  • 0 Likes

This server does not support Forward Secrecy with the reference browsers. Grade capped to B.

Hi Champions, I have evaluated the IP address to the GlobalProtect gateway on the Palo Alto firewall via Qualys SSL Labs and got the following results. Object > Decryption > Decryption Profile is I am trying to find out how to fix this issue of "This server does not support Forward Secrecy with the reference browsers. Grade capp...

Oliver_Dalugodage_0-1724221684555.png
Oliver_Dalugodage_1-1724222240030.png

Custom vulnerability object trigger

Trying to use a custom vulnerability object to raise a threat alert when a user directly enters a request for access to an IPv4 address . eg http://12.34.56.78 . Ive created a object , with a pattern of (.*((?:\d{1,3}\.){3}\d{1,3})) and applied it to a vulnerability profile that is applied to a bunch of rules . I can see the rules triggered ...

Setting Up SSO In GlobalProtect Clientless VPN Portal App

Hello.I have a GP portal setup and working with a published app for VMware Horizon. Authentication to the portal is setup with Duo MFA and works as designed. The issue is that I would like to reduce the amount of authentications after the user logs in to the portal. When a user clicks on the the Horizon client HTML5 link, it opens the app page a...

Jesse_K by • L0 Member
  • 14674 Views
  • 10 replies
  • 2 Likes

global protect agent not connecting after windows imaging with new updates.

Hi Team, We are facing issue with our global protect agent not connecting after windows imaging with new updates. We were suspecting windows KB5018410 to broke this, but this is not installed. The error we are seeing in logs is "client certficate not found". However, correct certficate chain is already present in the machines. It only works when...

Jagdeep1 by • L2 Linker
  • 1377 Views
  • 1 replies
  • 0 Likes

Clientless VPN Decrypt error - 10.2.9-h1

HI Team We are facing an issue where Clientless Portal does not show the login page. Traffic reaches the external firewall we see the connection being allowed but it eventually gets denied with a "DENY - decrypt error". We are using the Go Daddy cert and have ensured the cert chain is complete. The strange part is it works when we use GP C...

Resolved! Global Protect Internal Host detection

Hello, I have configured Global Protect with Portal + External gateway and pre-logon always-on with Enforced Global protect Connection for Network Access. I have enabled Internal Host Detection IPv4. So far this is working great and Global Protect detects if it is in an Internal Network and if it is not it automatically prompts you for authenti...

Can't Access Firewall while Connected to GP

Hi Everyone, We have a working GP setup and our users connect to the VPN without issues. However, when trying to access the firewall via its management IP while connected to the GP, we cannot reach the firewall. Other network resources specified in the access routes are reachable. Here are the troubleshooting steps I conducted: 1. Ping, SSH,...

zedexxx by • L1 Bithead
  • 2256 Views
  • 2 replies
  • 0 Likes

Setting up VPN for MAC access

I have GP set up for Windows, and it works. When I use a Mac to go to the portal, it says it has moved or does not exist anymore. I have not made changes, not sure what has happened or where to go to make sure MAC will work.

mbritt by • L1 Bithead
  • 2202 Views
  • 4 replies
  • 0 Likes

Resolved! Disconnect GlobalProtect user not working via API.

I am trying to disconnect a global protect user on our gateway via the API. I have tested using the API browser and via a CURL command, but no matter what syntax or variation of the username I use, I get the message Remote-VPN-Gateway-N joe.bloggs Invalid user name. Below is the syntax I am using with the XML API based on the documentation. Am I...

Jamesy by • L2 Linker
  • 7533 Views
  • 5 replies
  • 0 Likes

Unable to connect to the Global Protect on new Windows 10 build.

Hi All, A client has run into a strange intermittent issue with GP clients not connecting correctly on a new build of a Windows 10 laptop. The issue also randomly happens on some existing domain machines. Basically, the GP client doesn't connect the first time when logging in with a domain account and a registry key needs to edited and / or the...

Ben-Price by • L4 Transporter
  • 6789 Views
  • 2 replies
  • 0 Likes

LSVPN redundant portal

I am setting up a lspvpn solution to replace a current site to site configuration between our main site and 30 home firewalls. Currently I have Portal A sending traffic to Gateway A and Gateway B. I want to setup a redundant portal so Portal B sends traffic to Gateway A and GatewayB as well. Is this possible? I can get the portal connection ...

mmercald by • L1 Bithead
  • 677 Views
  • 0 replies
  • 0 Likes

Resolved! Radius Auth VIA management?

Greetings, i have a GP portal and Gateway configured for radius auth in vr2 with just connected and a default route. vr1 has the routes to the radius server. my question is, can i send the auth requests via the management port? thanks

tcsmithh by • L1 Bithead
  • 2782 Views
  • 3 replies
  • 0 Likes
  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks