Prompted to sign in to Global Protect every time Mac restarts or connects to different network.

Page to login global protect after connect not appear, and appear error AADSTS50105

By error when I tried to login to global protect, I put an email incorrect, and after when try again to login global protect not show login page, only show page error AADSTS50105.

I tried everything like reinstall, delete folder palo alto, delete fol

SSL Certificate update while GP migration

Hello,

I have scheduled all activities for my FW migration from ASA to PA, however I have a question about GP migration.

The PA FW has its GP deployed with Public IP x.x.x.6 and gp.domain.com, whereas the ASA has Anyconnect on Public IP x.x.x.5 with 

Add PreLogon to Existing Portal

Hi Everyone,

Our current setup is a GlobalProtect portal that utilizes SSO via the free Okta service.  This serves our customers as well as our internal staff.

I'd like to switch our internal staff laptops to the prelogon method, so they automati

GlobalProtect blocks my internet access

Hi all,

I've recently started to use a GlobalProtect vpn, but every time I successfully connect to it, it blocks my internet access. I reached out to our IT departement and a firewall engineer told me he can see that I am connected and that traffic i

IPv6 Traceroute not returning hops before the destination

I have two GlobalProtect installations each configured differently. I can ping and connect to IPv6 destinations just fine. If I run a traceroute to the IPv6 destinations using UDP or ICMP, I do not get the hops before the destination. For example:

Blank Login Page

Issue occurs both on Windows 10 & 11. Mostly see it on 10 though and when the user is off site. Rarely do we see the issue on site. User tries to connect to GlobalProtect, window pops up and it's blank - can't type in credentials.

GP version: 6.0.3

Is it possible to host a Global Protect Portal and Gateway on the same outside interface as IPSEC VPNS

I'm trying to set up a global protect gateway on an interface that already has a couple IPSEC VPN tunnels on it. But I am unable to browse to the page to download the client. After some checking I realized that I'm not even able to ping this interfac

Meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel"

What is the meaning of GP app setting "Have User Accept Terms Of Use before Creating Tunnel" , for which purpose this option is useful ?

Global Protect authentication happened twice while LDAP and Okta Auth

Recently we moved  to PA-3410 software version 11.0.1-h2 from PA-850  software version 10.2.3-h4 .

on both firewalls

We have selected option for authentication override 

On Portals
Generate cookie for authentication overri

"failed to open message queue" error for one user but not others

Greetings all.  CentOS 8 user is unable to run globalprotect from the CLI; gets "Cannot connect to local gpd service."  The PanGPA process never starts for the user, either automatically or manually.  In user's PanGPI.log, the errors are:

Global Protect

Hi Friends,

We have a customer who is using global protect.

Two HIP profiles are configured for two different groups. One for AD users and one for Local users.

The requirement is if local user tries to login he should get the hip profile banner set

MFA on PAN-OS Firewall (okta integrated) redirects on GP instead of browser for HTTP resources.

I have MFA deployed on the firewall ( okta integrated), based on implementation if user is accessing http/https based resources then redirect will happen in Browser however, for non-http applications MFA will prompt on GP client App,

Please note port

GlobalProtect Web Portal - Domain Validation Code (DVC) - /.well-known/pki-validation

Does anyone know how to go about performing domain validation for an IP address for the GlobalProtect Portal?

This is a standard supported by most Certificate providers but I can't find anything about it when searching Palo Alto's site.  With this