GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

What does it mean Stage and Event GlobalProtect Fields?

Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout,...

rennersf by • L0 Member
  • 8639 Views
  • 5 replies
  • 0 Likes

Global protect self uninstall on mac

Hi all, I have a peculiar problem that I would appreciate help with. Myself and the IT team(me being part of the security team) are piloting the GP with Prisma sase as the vpn of choice for our organization. We have two endpoints with it - a mac and a windows. now everything works fine, but for some reason after about a week from installation th...

Global Protect Disconnects Frequently

Hello, I am running Palo Alto in my network and few team members connects to Global Protect VPN for different partner. As soon as they connect, VPN keeps disconnecting frequently. If same members connect VPN from home or with hotspot, it works perfectly fine without any drop. Can any one advise how to troubleshoot this issue?I found a known is...

PiyushBassi_0-1710934167760.png

Global Protect Azure MFA SAML FIDO Key

Hi, I configured Global Protect with Azure MFA (SAML).I have set this up as described here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE Unfortunately I can´t see the FIDO Key in the Login-mask. The other authentification methods are displayed. Since some users have only one FIDO key the question would be if ...

GlobalProtect Connection Issues in PAN-OS 10.2.7-h3

Hello Friends, What troubleshooting steps can I take to address the GlobalProtect connectivity issues, including the "Your GlobalProtect session has been disconnected due to network connectivity issues or session timeouts" notification and the SSL VPN GlobalProtect connected status with 0 bytes traffic after upgrading PAN-OS to version 10.2.7-h3...

fatihs20 by • L0 Member
  • 29413 Views
  • 23 replies
  • 2 Likes

Massive update of GlobalProtecr agents

Best regard Equipment Currently in the company we are with the task of updating the GP agent to a more recent version, however, we do not know how much impact there may be on end clients if we update the agent, since they will understand that there are many users. Having said the above, I would like you to clarify the following information for m...

aalfaro by • L2 Linker
  • 1964 Views
  • 3 replies
  • 0 Likes

Can HIP domain use wildcard characters?

May I ask HIP domain can use wildcard characters or not? (Like diagram below) I read an article that OS cannot use *, but I am not sure whether domain can use wildcard characters or not(just like URL wildcard) https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oM79CAE Thank you.

WilsonHuang_0-1710749217423.png

Get a defined target IP Adress and Subnet via GlobalProtect (PA-460)

  I have a target system that I need to access via WebUI. The system is reachable via its IP address 192.168.255.129 with a /24 (255.255.255.0) subnet. Furthermore the system expects a client IP address of 192.168.255.130, any other IP address will be rejected. The target system is a "proprietary blackbox", which means these settings cannot be c...

Bild (3).png
Bild (2).png
SaArlt by • L1 Bithead
  • 7515 Views
  • 4 replies
  • 0 Likes

Use HIPS to assign Gateway IP Address for external clients

Hi, I am looking at how to assign different IP Pool addresses to clients based on a HIPS check. We are currently achieving this by assigning a different IP Pool to users based on user group membership of an Active Directory group. When the client authenticates with the Gateway, it receives a Pre-logon IP Address - lets call this an IP Addres...

Configure TOTP (Google Authenticator) for GlobalProtect

I have looked at the different support documents and previous discussions but have not gotten much wiser. I need to have a handful of users connect to GlobalProtect with TOTP as the second authentication factor. Since the number of users are so low, they can either live on our LDAP service (preferred) or as local users. The TOTP is to be verif...

royolsen by • L0 Member
  • 47146 Views
  • 11 replies
  • 0 Likes

Way to dual-boot MacOS without violating encryption requirements for GlobalProtect?

I'm using a 27" i9 iMac running MacOS Monterey 12.7.3 with GlobalProtect VPN 5.2.12–26.In order to connect with my organization's VPN, GlobalProtect requires my drive be fully encrypted. Normally that's not an issue, as my default is to do so, with FileVault.However, a few months ago I was considering upgrading to Sonoma, and wanted to first te...

Global Protect Encryption Issue_redacted_flat.png
byte99 by • L0 Member
  • 1987 Views
  • 0 replies
  • 0 Likes
  • 1722 Posts
  • 67 Subscriptions
Top Solution Authors
Top Liked Authors
Labels