This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect 6.1.0 for Linux Fedora 39

hi all, Our EU is currently on GlobalProtect 6.1.0 on PA-5250 firewall, we just wondered if this GP 6.1 support Linux Fedora 39? I tried to find any legit resources that would mention this but couldnt find anything helpful. Would like to share the information to our EU, hopefully anyone could help. thanks!

How to validate user/endpoint is fetching which profile from GP Portal Agent configuration.

Hello Team, I have configured multiple agent profiles in the GP Portal and I want to verify which agent profile is currently being fetched by individual user, How do i verify that from the firewall or endpoint? Context: I have profile 1 which has a limited set of exception users who have some flexibility to switch the portal to add a new port...

GlobalProtect 6.2.2 connects automatically despite on-demand is enabled

Hello everyone, After upgrading GlobalProtect from 5.x to 6.2.2 users started to complain that GP is connecting automatically after logging in to OS. Agent App configuration hasn't been changed and still is On-demand. There is addressed issue in GP 6.2.1 which should solve this (GPC-18336 - Fixed an issue where the GlobalProtect app got automa...

MarRoz by • L0 Member
  • 2699 Views
  • 1 replies
  • 0 Likes

HIP Checks failing GP failing GP users called in ACL's when source device is Apple

Hi All, So I have Global Protect running with the HIP license. Our current conditions for HIP connectivity are; 1. Must be Windows 10 or 11, must have Crowdstrike installed and running, must have Zscaler Client Connector installed and running. I have no problems with any of these users. However, we have a very small subset of users on Macb...

dromanelli_0-1702919699035.png
dromanelli_1-1702919744847.png
dromanelli_2-1702920160790.png

Global Protect on macOS Sonoma 14.2 (betas and now release)

I generally try to run macOS beta version to jump ahead of any issues. I've been running macOS Sonoma 14.2 beta (2 and 4, specifically). In my testing, the Global Protect VPN client successfully connects (we're using certificates on in this case) but then fails to pass any traffic. The interface has an IP address, which can be pinging, but no...

SAML Authentication - Users not prompted for password or MFA

Hi all, We've setup SAML / SSO and all works OK , however, when GlobalProtect starts, it automatically connects without asking for any creds. I'm assuming this is a result of the machine being joined to the same domain so the password is not needed. However, I'd like to configure it so that at least an MFA prompt occurs. Connecting on a non j...

GlobalProtect Logon Banner with Accept button

I'm trying to figure out if therre's a way to configure GlobalProtect to prompt the end users to accept a logon banner message when they've entered their credentials successfully in the GlobalProtect app. Cisco Anyconnect can accomplish this in the group-policy and it's nice because after a user enters their credentials, they get prompted with a...

Resolved! Strange errors with Globalprotect and PANOS 10.2.3-h2

Hello everyone, We have two strange errors with Globalprotect (v. 5.2.11) since the update to PANOS 10.2.3-h2:- For internal connections (via tunnel) the connection fails with the event gateway-hip-check with the message "Invalid tunnel end point IP address". - The external portal is suddenly no longer accessible via https but pingable via the...

Spaniel by • L1 Bithead
  • 6827 Views
  • 5 replies
  • 0 Likes

PPPoE and GlobalProtect Issues

Hi everyone, Hoping someone could tell me where I'm going wrong with this. We have recently acquired a secondary ISP line which is connected to our PA's eth1/1 via PPPoE, which includes /28 available IPs. I am looking at moving one of our client's GlobalProtect portal and gateway from our primary ISP line (Which is via static IP) to the seco...

Resolved! Can't connect user group is fine but Agent Policy does not match

Hello, I'm running out of ideas to tshoot a GP connection problem. I have a user that is in an AD group uservpn (checked on the cli and it's fine). Added this group to Portal and GW configuration and I can't connect. If I live any for the config under user/user group for portal and Gateway it works. I see the user has this group on the CLI but s...

Global Protect portal entry

I'm using GP 6.1.2 and GP 5.2.11 respectively in my environment. We are in the midst of upgrading the 5.2.11 to 6.1.2. There is also a need to add/update the portal entry with a new entry.Where is the file that store the portal entry? We are using SCCM to push the GP agent to UAT laptop and would like to push portal entry as well.

KhairulNizam_0-1701658046016.png
  • 1703 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks