GlobalProtect Welcome screen links - PanGPA.exe authentication

Hi, for long period of time we are using global protect welcome screen including url links to web applications.

Those links are for easy access to internal web applications, lately there was a change on the global protect client behavior which cause

Global Protect client not isolated

If you are using Global Protect AND you have split-tunneling enabled. Your PC is accessible via the local LAN. So if your in an insecure location the other people on that LAN can hack at your computer. If you don't believe me try it out. 

Certificate authentication on Linux

Hello,

Our company requires client certifications in order to be able to connect.  I've created a standard CSR using the openssl command and had it signed by our in-house CA.  Then Imported into globalprotect.    However the portal does not approve t

GlobalProtect Login with okta

hello everyone

Accounts were linked by creating Paloalto NGFW and Okta Saml2.0 Application.
The GlobalProtect login method logs in with the Okta domain.
This works really well.
The login method is Always-on.

What I am curious about is that a user attemp

GlobalProtect appliance PCI Compliance

Hi,

We're trying to get our VPN appliance PCI compliant and not sure what is going on, as it's automatically failing.

Minimum TLS is 1.2 and have disabled all the weak key exchanges. This was done prior to any PCI compliance requirement.

When we

Global Protect in Microsoft Store Outdated

Hello All, 

I had a customer reach out to me about when the Microsoft Store would have a newer version of GP . Currently the version available is 5.2.8-5. Does anyone know when version 6 would be available? Thank you in advance. 

GlobalProtect

Server Certificate Error

I was able to connect a few weeks prior to this error by uninstalling and reinstalling the GlobalProtect client.  However this is no longer working.

I'm getting the Server Certificate Error popup:

I checked Device/Certificate Management/Certific

unable to install code42 agent when GP is turned on

With GlobalProtect running but not connected the installs are working as expected.

Once we are connected to the VPN, getting the following error:

Request to activate com.code42.agent.extension failed.

The operation couldn’t be completed. (OSSystemE

SAML failed login attempt error mesage

We have SAML setup for GP where we check if user is member of the allow list in the auth profile. 

We have some illegal attempts which show up in system log with only 2 entries, 'saml-client-redirect' and 'auth-fail' with error message 

"failed authe

GlobalProtect client cant access internal resources

PAN OS 8.1.22 / GlobalProtect Agent 6.0.3

(1) GlobalProtect has no issue connecting to portal/gateway (Dell Latitude, Windows 11)

(2) Gateway Access Route (split tunnel)(No direct access to local network is UNTICK) has access to 0.0.0.0/0

(3) VPN u

Comcast domain suffix getting appended into DNS requests over Global Protect

I ran a packet capture on PAN to try and figure out an intermittent problem with one of my GP 5.2.5.66 users (Windows, Surface Pro) where certain web based or internal applications will just start working. The external are Outlook O365, Teams for exa