This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Enforce GlobalProtect Access Based on Microsoft Intune Compliance Status

Hello Palo Alto Community, One of my customers previously used on-premises Active Directory and has now migrated to Microsoft Entra ID and Microsoft Intune. All endpoints in the environment are Windows 11 computers. They have a requirement to allow access to sensitive internal destinations through GlobalProtect only from Intune-compliant d...

GlobalProtect Client Quadlet

I work on Linux systems, specifically Bluefin which is based on Fedora SilverBlue.My employer (Vanderbilt University) installed GlobalProtect servers for VPN.It is difficult to install an RPM or DEB package.Additionally, I use various versions which may not be well supported by the official packages.To that end I made a container image and insta...

SAML cookies and global protect cookies

Hi, If I am using SAML authentication on my portal and gateway what is the best practice around Authentication cookies override. When using SAML my user will be prompted via the default browser 2 times ones for the portal and ones for the gateway. I read that you can overcome this by generating a cookie on the portal an accept on the gateway i...

GOMEZZZ by • L2 Linker
  • 2909 Views
  • 1 replies
  • 2 Likes

GP Connection Failed - gateway could not verify the server certiticate of the gateway.

Hi All, I have GP setup and working like a dream..... most of the times. however i have a strange issue.. and seems to only affect Azure cloud PCs at the moment, normal users with laptops and desktops can connect no problem. my certs are all valid and signed by an external CA. however on Azure cloud PC's the connections are very intermittent.....

PA_nts by • L4 Transporter
  • 22513 Views
  • 7 replies
  • 1 Likes

failure to connect

I am trying to access the Global protect service but no matter what I do, I cannot connect to the service. I have contacted my univeristy's IT team but they were unable to resolve the issue and stated it may be due to a snapdragon processor on my laptop. Any ideas on how to fix it?

GlobalProtect Gateway behind reverse proxy

Is there a way to put the globalprotect gateway behind a reverse proxy for sslvpn only?I know that technically you can just NAT to the gateway but it is wanted to put the gateway behind a reverse proxy and not use ipsec, only sslvpn.When I try this, the globalprotect app is allowed but the connection fails nonetheless. I assume this is because t...

CLiqr by • L1 Bithead
  • 662 Views
  • 2 replies
  • 0 Likes

connecting to global protect

Hi! I have been trying to connect my laptop for a couple of days now and have contacted many support systems through my school to try and help me and nobody seems to know the issue. It seems that the vpn installs correctly, but it will not connect. Each time it says "cannot connect"

esacca2 by • L0 Member
  • 636 Views
  • 1 replies
  • 0 Likes

Restrict access via GlobalProtect to permit access to only a specific Google Drive Account/Folder

I’m looking to enable access via GlobalProtect to a specific Google Drive account/folder, rather than granting access to all of Google Drive. I’ve encountered mixed guidance on whether this is feasible—ranging from assertions that it cannot be done at all, to suggestions that it may be possible through a combination of SSL decryption, URL filter...

Global Protect Internal Detection

Hi all, We are experiencing an intermittent connectivity issue on our Corp Wi‑Fi, and I’m trying to determine whether this is related to GlobalProtect internal network detection. Environment GlobalProtect Always‑On No split tunnelling Internal Host Detection configured using the IP address and hostname of a Domain Controller Corp Wi‑Fi uses RAD...

M.Marzin by • L0 Member
  • 1532 Views
  • 1 replies
  • 0 Likes

Conflict between Global Protect and RedSky MyE911 application

Hello,We have thousands computers with installed RedSky MyE911.Installation of this app is mandatory on our computers (it is federal low).We did not have a problem with this app when used Cisco Security Client VPN but now, after installation of Global Protect VPN we have a problem.RedSky MyE911 is started automatically (when Windows started), be...

azelenin by • L0 Member
  • 1677 Views
  • 3 replies
  • 0 Likes

GlobalProtect 6.1.11-175 Connection Issues

I am using GlobalProtect version 6.1.11-752 on my iPhone. I frequently have to tap the connect button multiple times before it successfully connects. Additionally, the connection wait time often exceeds 10 seconds (sometimes even longer), whereas it usually takes only 2–3 seconds to connect. Has anyone else encountered this issue? Are there any ...

klec_he by • L1 Bithead
  • 2683 Views
  • 5 replies
  • 0 Likes

Rollout Strategy: GlobalProtect Disconnect Comments + 12-Hour Auto-Reconnect

We are planning a global rollout of two specific GlobalProtect configurations and need your "battle-tested" advice on the following combination: Mandatory Disconnect Reasons: Users must provide a comment to disconnect. 24-Hour Auto-Reconnect: Using a 1440-minute (24hr) Disable Timeout to force reconnection daily. Key Challenges & Conce...

Potential False Positive IoC

Hello everyone! I'm Arsen, Junior SOC Analyst and I've got some questions regarding the detection Evasive HTTP C2 Traffic Detection(89950). Recently, I have received several alerts, where the Destination IP was 91.108.56.132, which is related to AS 62014 (T. Messenger Inc). The user claimed that he used a T. Desktop Application and it seems to b...

Portal/Gateway certificate renewals - automation?

Greetings With the continued push for shorter and shorter SSL certificate validation periods coming rapidly to a head (in case you missed it - maximum SSL certificate validity is now 200 days, will go down to 100 days in March 2027, and 47 days in 2029), I'm looking for a way to automate SSL certificate renewals on my Global Protect gateways/p...

darren_g by • L4 Transporter
  • 1729 Views
  • 2 replies
  • 0 Likes

GlobalProtect 6.2.8-h8(6.2.8-814) has been removed from the Support Portal

Hey Team, I just wanted to make a quick post advising everyone that GlobalProtect 6.2.8-h8(6.2.8-814) has been removed from the Support Portal due to known compatibility issues with macOS 26.3.1 users. Please remove this from your environments if you meet this criteria to avoid any outages. We will have an official release with additional info...

  • 1692 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks