This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect ver6.1.4 on IPhone IOS 15

Hi, I am trying to use GloblaProtect 6.1.4 on IPhone IOS 15, I am able to open the portal successfully but when I try to connect using the gateway I get an error says "Gateway external_gateway: could not connect to gateway, the device or feature requires a globalpretct subscription license. note: I have installed the chain certificate provid...

Resolved! Palo Alto with Azure SAML issue

Hi all, I have configured all the required basic SAML configurations in Azure, and assigned a few test AD users to GlobalProtect enterprise application. Also configured those required settings on the Palo Alto end where I import the XML cert, create an authentication profile, and assign the profile to both my gateway and portal. You can refer to...

KevinNg_3-1710232179173.png
KevinNg_0-1710231902791.png
KevinNg_1-1710232073112.png
KevinNg_2-1710232093067.png
Kevin-Ng by • L2 Linker
  • 8143 Views
  • 9 replies
  • 0 Likes

Global Protect Pre-Logon followed by SAML SSO

Hi Guys, I have implemented global protect with pre-logon (device certificate) followed by user logon using SAML (Azure AD as SAML IDP)When global protect client initiate the user authentication below windows security pop up asking to confirm the certificate.After confirming the certificate it connects fine and every time user reboot same pop up...

NamalW_0-1599546178555.png
Namalw by • L1 Bithead
  • 12553 Views
  • 8 replies
  • 0 Likes

GP Portal logs showing local password guessing attempts even though I'm using Azure IdP. Should I be concerned?

I have our portal set up to use Azure for logon, and it's been working great. Lately I'm seeing many of these attempts in the system logs: 1. saml-client-redirect, "Client '95.164.0.25' redirected to 'https://login.microsoftonline.com/xxxxxxxxx/saml2' for authentication profile "Azure" 2. auth-fail, Failed authentication for user 'lakiesha'. R...

Maxstr by • L1 Bithead
  • 1184 Views
  • 0 replies
  • 0 Likes

IdP initiated GlobalProtect VPN login

I'm in the process of configuring Duo SSO for GlobalProtect authentication. It's all working great when logging in through the GP application. However, both the Duo and Entra how-to guides mention that you can initiate the login through their portal (IdP or SP initiated login). However, when I try it though the Duo Central portal, it just logs m...

Associate user credentials with a given portal

I'm a consultant working for multiple companies that use Global Protect. At the moment during the day I have to disconnect and connect multiple times a day to these companies and each time I do this I have to re-enter the user/password then click connect to invoke 2F auth. Can I some how enter the user/password for a given portal and have it a...

Remove Remote User from Global Protect using XML API

I am trying to remove remote users from Global Protect using XML API. I have attempted to remove a user from both the Gateway and the Portal but I have not been successful. This is the command I am using to remove the user from the Gateway: (Sections in bold are the changes I made to the XML API) https://Firewall_Name/api/?type=op&cmd=&lt...

John_J_0-1710258179570.png
John_J_1-1710258420581.png
John_J by • L1 Bithead
  • 2555 Views
  • 2 replies
  • 0 Likes

GlobalProtect sign out or logoff is not showing to users.

Hi, I have number of users that needs to sign out from their account and connect GP with their second account. The options of sign out or logoff for user is not showing at GP client. we are using client 5.2.11 and did also testing with 5.2.12 and 6.0.4c26 (which causing strange symbols instead of English). all the setting are in place: Allow...

SShnap by • L3 Networker
  • 17980 Views
  • 5 replies
  • 0 Likes

Dictionary Attack On VPN

We have been having unknown person(s) been attacking our firewall for the past few weeks with a Dictionary Attack. They even went the length of finding one of out IT staff on Linkedin and try to get his Globalprotect Login. Luckily they have not been able to gain access, but I want to create a rule that will autoblocks any attempts that do n...

HIP Mobile not detect s/n use host id instead

Hi Expert , I found issue about not able to detect hip info serial number for mobile device is showing host id instead I'm not sure about is should be show like this kb : How to Check the Information for a Mobile Device in the GP-100 - Knowledge Base - Palo Alto Networks but show just host id and on s/n tab show value of host id as well ...

  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks