This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! GlobalProtect Issue on PA-3020 9.1.17

Hello everyone, I'd want to seek your guidance on a matter that we're now dealing with. So, last year, around the third week of December, we upgraded the firmware of PA-3020 from 9.1.15 to 9.1.17 as per the advisory of Palo Alto. So far, no issues have been reported following the upgrade, but after a while we have discovered an issue regarding...

Marlo_Perez_0-1704948532651.png
Marlo_Perez_2-1704949007599.png

Resolved! GlobalProtect quarantine Prisma Access Mobile Users

Has anyone used the GlobalProtect quarantine device functionality with Prisma Access Mobile User deployments? I have data redistribution setup with the service connection infrastructure subnet, but devices in the quarantine list do not seem to be recognized on the mobile user gateways. There must be a disconnect with the quarantine list on Pa...

RDP disconnects GlobalProtect session

We have our laptops configured for pre-logon with machine certs, and SSO for the user based tunnel. If we RDP to a laptop that is sitting at the logon screen with the machine tunnel up, RDP works fine. However, if we RDP to a laptop that is already signed in with the user tunnel up, then RDP kills the GlobalProtect session and disconnects. ...

Jsitter by • L1 Bithead
  • 4555 Views
  • 1 replies
  • 0 Likes

Blocking by Country Security Policy

I've added several countries to a Security Policy that restricts access based on Location - however, I'm still seeing login attempts from those countries. What other steps can I take to ensure we don't see anymore attempts from the countries already added to the policy?

How to detect if the VPN connection is fully ready?

I have a logon script (PowerShell) that captures details and saves them to a file on a network share. This works for users on the network but those who are remotely working are using the GP VPN and the file is not getting saved. The problem seems to be the VPN is in a connected state when the user logs into the computer. However, as the login pr...

Global Protect - Issue with switching to a different gateway

We are piloting 6.1.2-83 client version. With new version we are seeing below behavior. After connecting to Global Protect VPN if we try to switch to another gateway manually, the client is throwing error "Matching client config not found. Connecting to Best available gateway" and it fails to connect to other gateway and ends up connecting to ...

GP 6.2.0-89 White popup window issue

Hello everyone, We recently pushed 6.2.0-89 to our whole organization. It's been very smooth so far except for one odd issue that has been reported multiple times so far. This issues hasn't happened before on any older version. I've attached two screenshots of the issue, but essentially people seems to be getting a complete white GP client wi...

Global Protect Client - Download Page MFA

Hello everyone,I have a question about the Global Protect Client.Is it possible to equip only the GP download page in the browser with MFA2 (mail to an address)? But the internal update procedure in the GP client should not be affected by this. Many Thanks cu Wolfgang

Adding SAML authentication profile from second AzureAD to existing gateway

Hi all, We are required to move authentication of our GlobalProtect users from our own domain to new domain, owned by parent company - O365 licences cost needs to be scaled down on our tenant. We have already migrated O365 userbase, so we have credentials from new domain, but now need to migrate GP authentication from our O365 tenant and to star...

Global Protect Default IPSEC Crypto

If Global Protect is simply configured with the default profile and there is no profile contained in Network>Network Profiles>Global Protect IPSEC Crypto, what encryption settings is it using?Follow up, for the other encryption options does anyone have the header sizes handy?

Android SAML MFA Issue

Hi,We performed authorization on desktops and browsers using SAML login with GlobalProtect. We also did it on the mobile app, but we ran into a problem.We provide the MFA process with push notification through our own application. GlobalProtect opens the browser to get authorization in the mobile application. After the login information is writt...

auto (pre)logon unconfigured installations

Hi everybody, I use pre-logon (always on) for our users which works pretty well. One of the goals is to prohibit Internet access without VPN. Now consider the following situation: People receive a freshly installed notebook (Windows). The GlobalProtect client is installed but it was never configured. In fact, no user logged into Windows so far...

  • 1695 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks