This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect Cert+SAML

Hello, I'm reaching out to see if anyone has configured GlobalProtect with cert+SAML authentication with multiple gateways across multiple firewalls. I've been attempting to configure this, however, whenever I use cert+SAML at the gateway and I attempt to switch gateways after logging in, the logs always show "client cert not present". I h...

GlobalProtect Name Normalization issue

Hello, I have set up GlobalProtect using AZURE SSO for the sign in and for group mapping I am using LDAP. However, in the GPSVC logs, I see users being returned as domain\\username2 slashes. This is causing issues with users not being able to get a client config as I am putting users in specific subnets according to their AD membership.The usern...

Configuring GlobalProtect via Ansible

Hi,I'm working on creating an automated Ansible process through which I can configure GlobalProtect in PAN Firewall.The automaton process I try to create it based on the official Paloalto Repository containing ansible playbooks:GitHub - PaloAltoNetworks/ansible-playbooks: Sample playbooks for the Palo Alto Networks Ansible modules.Unfortunately,...

Resolved! Latest version of PANGP Virtual Ethernet Adapter

I am trying to troubleshoot a GlobalProtect intermittent disconnection issue. I noticed that the client is using V5.02 of GP. The PANGP Virtual Ethernet Adapter driver date is shown as 9th August 2010, and the version is 3.0.1.4. I work on the Helpdesk so the installation is done higher up the food chain. However, a date of 2010 for a driver...

shaun_p by • L0 Member
  • 42364 Views
  • 3 replies
  • 0 Likes

Inquiry regarding the maximum number of HIP Objects (vs HIP Profiles)

Hi all, I have a question regarding the system limits for GlobalProtect HIP configurations. I am trying to find out the maximum number of HIP Objects configurable per device. I am currently using a VM-300, but I am also looking for information applicable to other hardware models (PA-Series). I tried running the following command to check the sys...

gp Always disconnect

I've been using GP recently and it keeps disconnecting and reconnecting.I'm sure my network is working properly.I checked the pas log:(P1336-T19828)Debug(2485): 01/22/26 21:59:49:665 Received a tunnel packet with fragment 0x8D(P1336-T4260)Debug(1047): 01/22/26 21:59:50:828 select() timeouts, retry(P1336-T4260)Debug(1047): 01/22/26 21:59:51:840 s...

Juns_Net by • L1 Bithead
  • 5749 Views
  • 4 replies
  • 0 Likes

User Removed From LDAP Authentication Group Still Able to Connect to VPN

Hello everyone, I have a user who I removed form all VPN LDAP authentication groups about a week ago and they are still able to connect to the VPN. I was thinking it may have to do with the cookie re-auth but we have it set to expire after 24 hours. I am at a loss as to why they are still able to connect. I was hoping someone has had a simila...

cmaciel by • L0 Member
  • 3021 Views
  • 1 replies
  • 0 Likes

Globalprotect Slow/Disconnecting randomly

Hi All, I am having issues with GP disconnecting randomly or slow performance issues, the laptops that it is installed on are Dell Latitude 5450's, over the vast majority there are no discernable issues (circa 2.5k users) however for random users there are these Performance issues and disconnecting when using certain apps (teams being one) reb...

GP connction failed

we had an internet outage at out data center this last monday. it dropped all users off VPN. the users are trained that if they cant connect to production VPN to try the DR site VPN. only about 1/3 of the users were able to connect to the DRVPN. the rest got a message "The network connection is unreachable or the portal is unresponsive. Che...

Global Protect Blank Screen on Windows 11

Hello, I am having an issue where users go to lunch and the screen times out or the laptop goes to sleep, and they come back to a blank Global Protect (as seen below). The only way to fix this is to restart the laptop or go into task manager and end the global protect task and re-open the application. The issue is very intermittent and does not ...

JMadeiro_0-1764962336286.png

Resolved! Global Protect Portal / Clientless VPN does not recognize SAML username after update to 10.1.14-h20

After updating our firewall from 10.1.13 to 10.1.14-h20 as per CVE-2026-0227, it's no longer possible to access the GP Portal via a web browser: the authentication via SAML continues to work but now gives back an error page. Checking the GlobalProtect log gives the error message "Username from SAML SSO response is different from the input". ...

mszczuka by • L0 Member
  • 5177 Views
  • 3 replies
  • 0 Likes
  • 2077 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks