VPN SSO with MFA every time

Hi

We have recently purchased a Palo Alto firewall and connect to the VPN using GlobalProtect. 

For Teams/Sharepoint etc. We use Azure MFA where a push notification comes through to the authenticator app and to get this working on GlobalProtect w

Clientless VPN portal and SAML SSO and Application SSO

Hi there, I wanted to check that possibly what I'm trying isn't actually going to work. Had a look around at people with simular issues on LDAP, but I thought using SAML would solve this ... but not!

What I'm trying to achieve here is SSO into the

Global Protect users are unable to access SQL database which hosted in Azure

We have a tunnel configured between on-premises PA-5250 and Azure. traffic flows as expected users who are not connected to the global protect can connect to the SQLMS without any issues.

However, users who are connected to the GP can't access the

GlobalProtect ver6.1.4 on IPhone IOS 15

Hi, 

I am trying to use GloblaProtect 6.1.4 on IPhone IOS 15, I am able to open the portal successfully but when I try to connect using the gateway I get an error says "Gateway external_gateway: could not connect to gateway, the device or feature req

Global Protect Pre-Logon followed by SAML SSO

Hi Guys,

I have implemented global protect with pre-logon (device certificate) followed by user logon using SAML (Azure AD as SAML IDP)

When global protect client initiate the user authentication below windows security pop up asking to confirm the cer

GP Portal logs showing local password guessing attempts even though I'm using Azure IdP. Should I be concerned?

I have our portal set up to use Azure for logon, and it's been working great. Lately I'm seeing many of these attempts in the system logs:

1. saml-client-redirect, "Client '95.164.0.25' redirected to 'https://login.microsoftonline.com/xxxxxxxxx/sam

Global protect intermittency

A customer tells me that he has vpn connection intermittency in several of his sites, how can I trace the problem or what can it be due to?

IdP initiated GlobalProtect VPN login

I'm in the process of configuring Duo SSO for GlobalProtect authentication. It's all working great when logging in through the GP application. However, both the Duo and Entra how-to guides mention that you can initiate the login through their portal

Global Protect App for Surface Pro 9 - Chip SQ3

Pleas help me about setup GP app for Surface Pro 9 SQ3 - ARM64. GP app notify The Service is not running!

Associate user credentials with a given portal

I'm a consultant working for multiple companies that use Global Protect.

At the moment during the day I have to disconnect and connect multiple times a day to these companies and each time I do this I have to re-enter the user/password then click con

How to best use HIP checks to force current MacOS releases

Hello,

What's the best way to create a HIP check to enforce current versions of MacOS? Prisma Access / Strata UI has some built in version values but it only goes up to MacOS 14.1. 

We're looking to create a rule to enforce current 13.x and 14.x

Remove Remote User from Global Protect using XML API

I am trying to remove remote users from Global Protect using XML API.  I have attempted to remove a user from both the Gateway and the Portal but I have not been successful.

This is the command I am using to remove the user from the Gateway:

(Secti

GlobalProtect with Radius Authentication

Hello,

Is it possible to connect to GlobalProtect using EAP-TTLS with PAP authentication?

I am using OneGate as our RADIUS server.

GlobalProtect sign out or logoff is not showing to users.

Hi,

I have number of users that needs to sign out from their account and connect GP with their second account.

The options of sign out or logoff for user is not showing at GP client.

we are using client 5.2.11 and did also testing with 5.2.12 and 6