This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Unable to access Youtube,com while using GlobalProtect vpn

Dear All, I am using split tunnel in our GlobalProtect vpn and have excluded youtube.com. It was working fine but our users are unable to access youtube while on vpn for a few weeks now. Below Errors: This site can’t be reached The web page at https://youtube.com/ might be temporarily down or it may have moved permanently to a new web address...

GlobalProtect Migration

We are in the process of migrating from AnyConnect to GlobalProtect, has anyone had any experience with having both agents on Windows machines and using the Network Sign-In button on the Windows login screen? While we migrate we want to give our users the option to use either (Anyconnect or GlobalProtect). However when GlobalProtect is instal...

DEBARJD by • L0 Member
  • 2441 Views
  • 0 replies
  • 0 Likes

Troubleshooting PanGPS Services Not Working/Running. Error: 1068 while running PanGPS service.

I once was modifying some windows Registry values and after a restart, my Global Protect Client stopped working. Although I tired solutions for that problem through online posts, there was no direct solution to the problem I was facing. Required some searching on a different topic to get this working. Internally, the PanGPS service is dependen...

Yash_Naidu_0-1714542277144.png

Resolved! Force Login for specific Apps/Services

Hello, I have the following use case: I want my users to login whenever they use SSH for example, even if they are logged in via GlobalProtect, so just enter the password again, you know? How can I configure that? I tried configuring an authentication profile, but it did't not help, also I can't configure an appliation there. Thanks!

jermomiu by • L1 Bithead
  • 1597 Views
  • 1 replies
  • 0 Likes

GlobalProtect connected but no VPN connection

Hello everyone, Recently I got a problem with GP. I got GP login and status is connected but there's no VPN connection. I checked logs: HIP is matched but there's no Traffic logs from VPN client. I have to disconnect and reconnect several times then VPN connection ok I have uninstalled & reinstalled the latest version 6.2.3 Do you know what'...

SonBui by • L0 Member
  • 1708 Views
  • 1 replies
  • 0 Likes

How do I change global protect username on IOS?

With GlobalProtect for Apple IOS devices, how can I change my username? When I go to log in, it has my regular user email address and I can only fill out a password field. There’s nowhere to change the user. If we use a regular user account, it will enforce the vpn 24/7. If I use my admin user account, I can connect and disconnect at will. ...

ksauer507 by • L3 Networker
  • 1597 Views
  • 0 replies
  • 0 Likes

Resolved! Cloud Identity Engine - Failed to get client configuration

Migrating from on-prem (radius/ldap) auth & group mapping to CIE using AAD for both directory and auth types.GP porta connection fails with "Failed to get client configuration". Things we've checked... * CIE Auth Type configured to use the 'name' SAML claim from Azure AD, which happens to be the UPN * CIE Group Mapping is using UPN as the ...

mb_equate by • L3 Networker
  • 5338 Views
  • 3 replies
  • 0 Likes

GlobalProtect MacOs Connection

Hello, I am a PA-440 user, current globalprotect version is 6.2.3. When I try to connect to vpn via macos I get the following error (Could not connect to theGlobalProtect service. Make sure the Global Protect service is running.If the issue persists, contact your administrator.). I tried downgrading to GlobalProtect 5.2 with no solution.Can anyo...

Upgrade to GlobalProtect 6.2.3 client for Windows Does Not Complete

Hello. We moved from GlobalPotect 6.2.2 for Windows because it connected automatically even when configured for on-demand. Moving to GlobalProtect 6.2.0 or GP 6.2.3 was recommended as a solution. We chose the latter, but now users are reporting that GP 6.2.3 does not upgrade transparently. A popup message appears saying an upgrade is in progress...

jseregni by • L0 Member
  • 3891 Views
  • 1 replies
  • 0 Likes

Need Help on Configuring GlobalProtect VPN

Hello there, I am working on setting up GlobalProtect VPN for our organization and could use some advice. We have a mixed environment with Windows, macOS, and Linux machines, and we're looking to ensure a seamless experience for our users. Specifically; I am interested in hearing about best practices for; Configuring GlobalProtect for a mixe...

How to use a Machine Cert with a Private Key for Global protect prelogon

Greetings, We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating. We have imported a rootCA into Strata Cloud Manager the resides in Trusted Root CA on windows We have an Intermediate CA signed by th...

Conditional rules for GP MFA auth?

Is it possible to apply conditional rules on a GlobalProtect login so the means of login can vary? For example; If a Windows client is operating within a particular country or public IP range, just require simple SAML user login and maybe AD machine membership. However, if the client is outside of the country/ip-range, prompt the user for an MFA...

Multiple versions needed to access different portals

We are a service company that needs to access various customer sites. Several of our customers use Palo Alto Global Protect, but not all of them are up to date, and we have to use several different versions of the Global Protect "client" software (note sure if that's the term to use) to access these various sites. As a service company, we are no...

  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks