Client cert usage check failed

I am testing client auth using certificates and the certificate is not being retrieved from the User store. It's Windows 11. The PanGPA.log file shows this error:

(P23516-T9764)Debug(2744): 06/08/24 11:07:10:562 box return Valid client certificate

Global Protect on MacOS (TYPE65 dns queries)

While troubleshooting a failing GlobalProtect update on my own machine, I checked the DNS requests made by the Global Protect updater. And noticed that it's not making type A requests, but instead uses TYPE65 (aka HTTPS ordraft spec RFC 9460) request

Globalprotect vpn unable to connect on ios device

Hi Team 

I am facing issue Globalprotect vpn unable to connect on ios device  . getting certificate invalid error .

We deployed MS Autopilot, is it possible to do join AD domain network remotely via GlobalProtect?

We enabled "Connect Before Logon" but cannot sign in Windows, any idea, please?

Global Protect Authentication Loop with Azure unable to connect but authenticate completes.

Hello Everyone, 

Has anyone else been facing issues connecting via GP VPN lately?

When we try to connect via the agent. It prompts to authenticate via edge. Once that is complete and 2fa is verified on the webpage it states authentication complet

After Endpoint Traffic Policy Enforcement, client can not be access microsoft login portal for smal auth.

Hello Everyone,

I build a gp authenticaiton for azure ad saml auth in prisma access, and it works normally.

After enable "Endpoint Traffic Policy Enforcement", and missing add lists of enforcer exception list, and then finished push jobs,  client

GlobalProtect doesn't upgrade transparently.

In Prisma Access Mobile User, the user GP version was distributed as 6.2.0. However, due to an issue, I needed to upgrade to 6.2.3, so I set upgrade globalprotect to allow transparently in the app settings. However, there was no change for 6.2.0 user

Vulnerability Protection for CVE-2024-3400

TL;DR: ensure you are applying Vulnerability Protection to web-browsing traffic hitting your GP portal interface, if you rely on the intrazone-default allow

I was responding to another case of this flu. Even though the best-practice strict VP profi

GP Agent Machine Certificate Check

Hello,

I am trying to find out more information about a GP portal setting called Machine Certificate Check under Portal Configuration / Agent / Agent Config / Config Selection Criteria / Device Checks. I was hoping to use a machine certificate chec

browser certificate prompt when trying to connect with Gp portal

the scenario

NDES server

SCEP certificate profile intune

auto enrolled windows 11 machine with business hello configured

our setup is look for certificates in the machine store and specific OID (registry setting and PA end)

when trying to connect

Unauthorized GP login attempts

Hi All – Just curious on when to get concerned about unauthorized GP login attempts. I’ve had a person from the RU making login attempts on our GP for about a year now. I speculate they are new at this, after a while they learned how to mask the ‘HOS