HIP check Patch Management

Hello, I am trying to setup a HIP Profile for contractors accessing our network over Global Protect.
This HIP Profile is checking if version of Windows is supported(allowing only 8.1 and 10), then checking if Anti-Malware and Firewall is enabled and a

Globalprotect vpn unable to connect on ios device

Hi Team 

I am facing issue Globalprotect vpn unable to connect on ios device  . getting certificate invalid error .

We deployed MS Autopilot, is it possible to do join AD domain network remotely via GlobalProtect?

We enabled "Connect Before Logon" but cannot sign in Windows, any idea, please?

Globalprotect traffic translated to port 20077

Hi Team, in our test env I have a firewall with GP config. I would like to NAT the GP traffic to a loopback interface. Original destination port is 50443 and a NAT rule is set up to translate it to 443 (and the dest address as well...)

However, if I

Global Protect Authentication Loop with Azure unable to connect but authenticate completes.

Hello Everyone, 

Has anyone else been facing issues connecting via GP VPN lately?

When we try to connect via the agent. It prompts to authenticate via edge. Once that is complete and 2fa is verified on the webpage it states authentication complet

After Endpoint Traffic Policy Enforcement, client can not be access microsoft login portal for smal auth.

Hello Everyone,

I build a gp authenticaiton for azure ad saml auth in prisma access, and it works normally.

After enable "Endpoint Traffic Policy Enforcement", and missing add lists of enforcer exception list, and then finished push jobs,  client

GlobalProtect doesn't upgrade transparently.

In Prisma Access Mobile User, the user GP version was distributed as 6.2.0. However, due to an issue, I needed to upgrade to 6.2.3, so I set upgrade globalprotect to allow transparently in the app settings. However, there was no change for 6.2.0 user

GlobalProtect Pre-Logon Prompting for User Certificate

We have GlobalProtect Pre-Logon working with machine certificates however once the user logs into their laptop they are also prompted with thier User Certificate each time. There internal CA does issue machine and user certificates. Is there a way to

Vulnerability Protection for CVE-2024-3400

TL;DR: ensure you are applying Vulnerability Protection to web-browsing traffic hitting your GP portal interface, if you rely on the intrazone-default allow

I was responding to another case of this flu. Even though the best-practice strict VP profi

GP Agent Machine Certificate Check

Hello,

I am trying to find out more information about a GP portal setting called Machine Certificate Check under Portal Configuration / Agent / Agent Config / Config Selection Criteria / Device Checks. I was hoping to use a machine certificate chec