GlobalProtect Discussions

Global Protect license to enable MFA

Do we need a Global Protect VPN license to enable MFA ( Multi-Factor authentication) for SMAL Authentication.

PA-3020

TIA.   

Blocking by Country Security Policy

I've added several countries to a Security Policy that restricts access based on Location - however, I'm still seeing login attempts from those countries. What other steps can I take to ensure we don't see anymore attempts from the countries already

How to detect if the VPN connection is fully ready?

I have a logon script (PowerShell) that captures details and saves them to a file on a network share. This works for users on the network but those who are remotely working are using the GP VPN and the file is not getting saved. The problem seems to

Global Protect - Issue with switching to a different gateway

We are piloting 6.1.2-83 client version. With new version we are seeing below behavior.

After connecting to Global Protect VPN if we try to switch to another gateway manually, the client is throwing error "Matching client config not found. Connecti

GP 6.2.0-89 White popup window issue

Hello everyone,

We recently pushed 6.2.0-89 to our whole organization. It's been very smooth so far except for one odd issue that has been reported multiple times so far. This issues hasn't happened before on any older version. 

I've attached two s

Global Protect Client - Download Page MFA

Hello everyone,
I have a question about the Global Protect Client.
Is it possible to equip only the GP download page in the browser with MFA2 (mail to an address)? But the internal update procedure in the GP client should not be affected by this.

Man

Unable to access resources on specific gateways for single user while on global protect

I have one user and he is using global protect VPN. He was unable to access resources over global protect VPN for specific gateways.

For example we have 11 gateways in that user can able to access resources with 6 gateways whereas in 5 gateways inter

Adding SAML authentication profile from second AzureAD to existing gateway

Hi all,

We are required to move authentication of our GlobalProtect users from our own domain to new domain, owned by parent company - O365 licences cost needs to be scaled down on our tenant.

We have already migrated O365 userbase, so we have creden

iOS managed devices

what are the controls used to restrict iOS devices using VM workspace one \ Airwatch MDM.

Global Protect Default IPSEC Crypto

If Global Protect is simply configured with the default profile and there is no profile contained in Network>Network Profiles>Global Protect IPSEC Crypto, what encryption settings is it using?

Follow up, for the other encryption options does anyone ha

Android SAML MFA Issue

Hi,

We performed authorization on desktops and browsers using SAML login with GlobalProtect. We also did it on the mobile app, but we ran into a problem.

We provide the MFA process with push notification through our own application. GlobalProtect opens

auto (pre)logon unconfigured installations

Hi everybody,

I use pre-logon (always on) for our users which works pretty well. One of the goals is to prohibit Internet access without VPN.

Now consider the following situation: People receive a freshly installed notebook (Windows). The GlobalPro

GlobalProtect - Connect Before Logon

Hello

i deployed this command pangps -registerplap on all my desktop client to enable the VPN connection before windows logon

It works.

But, after some windows update i don't have the icon and i lost the option to connect before windows login.

WebRTC ICE candidates gathering

Hi Team,

I working in Whereby Media Team.
I am wondering if Global Protect modify browsers ICE candidate gathering in any form? Or blocking IPs etc.
One of your Customer reported to our tech support the following issue:
If they try to use Whereby WebRTC