Global Protect SSL Fallback Time explanation

When looking in the GP>Portal>App settings there is an option for "Automatically Use SSL When IPSec Is Unavailable (hours)".  0 clearly disables the feature.  But what exactly are we setting if we put in a number?  Is it how long a user will run in S

Tcp Scan on VPN Global Protect

Dear Team,

I have a server with ip 10.206.195.16, on that server port 4410 is not active. But when I try to Tcp Scan to that server with port 4410 using VPN Global Protect the state TcpTestSuccessed is 'True'. When I try to Tcp Scan to that server

GlobalProtect popup gateway list

Hello all, 

I often get this GlobalProtect window (gateways list) when I'm writing an e-mail.
Do you happen to know the keyboard shortcut ?

Global Protect with Duo MFA

Hi Friends,

We have configured the duo mfa for global protect users.

We have configured all the requirements for the duo using the below mentioned link.

https://duo.com/docs/paloalto

But still the MFA is not working.

I have some logs related to t

RADIUS OTP challenge does not work ( GlobalProtect with PAN-OS 10.1.x )

I got the issue that Globalprotect doesn't ask for OTP during gateway authentication, users get the error message:
" Gateway XXX: The network connection is unreachable or the gateway is unresponsive. Check the network connection and reconnect "

I tried

GlobalProtect in user-logon (Always-On) mode Symptom of unable to log out user when disconnected

GlobalProtect in user-logon (Always-On) mode
in use

When "disable", in Client PC (Windows)

When checking the result with "ipconfig", the IP is assigned
Symptoms of PanGP Virtual Adapter not being disabled
Checked in the firewall, tunneling is still on a

can we perform HIP check for domain without GP license

we want to enable HIP check only to detect domain of machines. is it possible to achieve without GP gateway license.

Below highlighted option want to enable in compliance.

Uninstall GlobalProtect on Mac ("Content Filter" remaining)

Dear all,

I'm trying to uninstall GlobalProtect on a Mac Ventura system.  I've already executed the command `sudo /Applications/GlobalProtect.app/Contents/Resources/uninstall_gp.sh` in a Terminal.  And it looks like the software has been removed.  At

globalprotect Client certificate with OID requesting users to select their certificate

I recently configured my globalprotect agent to look for a machine certificate including a specific OID to avoid a confusing selection process on devices with multiple client certificates signed by the same CA. Our original configuration started requ

GP with MFA on AD backend

Hi All,

need verification please..

looking to implement GP for a client with user-id and MFA.

The PA FWs are Azure based same for the AD servers and will use ldap to connect to AD from FWs.

The AD has MFA integrated already.

so the question is do i

Global Protect issues on few Win10 machines

Hi Guys, already have raised support ticket but no reply for few days, so trying to get some info here. I have seen couple of threads but not sure they are related to issue we have with these few Win10 laptops. We have Palo VM on 10.0.6 OS and GP is

GlobalProtect windows store app - how to???

hi all,

new to the palo alto world, however i cannot seem to find info on setting up globalprotect to use the windows store version of the GP app. I've ot the subscription licence applied to my firewall and went throuhg the pocess of creating a clien

Migrate GP users from on-prem to Prisma Access gateways

Hi-

I'm planning a migration of Windows and Mac OS clients from our on-prem GP gateways to Prisma Access. I had planned on making use of registry and plist settings, specifically 'portal' and 'prelogon,' to force the GP client to connect to the Pri

Global Protect Portal Client Certificate Authentication - Cert not found

I am trying to setup Global Protect Portal authentication using Client Certificate Authentication instead of radius. I generated CA and self signed cert on the palo. Configured Client Cert profile and attached it to Portal -> Authentication (removed