This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Remote Access through IPSEC

Hello,I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with. Here is a diagram: In case this isn't clear.... the WAN interface of the PA220 would service both the remote ac...

nwnetadmin_0-1606956535595.png

Ping scan returning what looks like a PANGP MAC address

Hi - we're all working remotely now - so I've connected GlobalProtect to reach resources on our domain. I was a little confused when I ran a ping scan on a particular subnet and all the devices returned the same MAC address along with the IP address, 02:50:41:00:00:02. I did a bit of research and learned that the GlobalProtect virtual ethernet a...

jkoelker by • L0 Member
  • 6026 Views
  • 2 replies
  • 2 Likes

Resolved! GlobalProtect change the connection type

Hello, we are installing a new cluster of vm palo, and we have configure Globalprotect acces. We can connect to the portal, but when we connect, we have this message : Can someone tell us why we have this message ? and what is the impact of this change of connection type ? We use the Globalprotect 6.1.2 version. Thanks

CHARRIER_0-1699355340302.png
CHARRIER by • L2 Linker
  • 17855 Views
  • 1 replies
  • 0 Likes

SAML Login Issue with Token-signing Certificate

We've run into an issue this morning where users are no longer able to authenticate via our ADFS (SAML) portal.This is the error users see: We opened a support ticket with Palo Alto, and this was the response from support engineer: Hello team, I found the cause of the issue. Looking at the logs I can see the following (I just picked one random ...

jrg_jeff_0-1699374020229.png
jrg_jeff_1-1699374277567.png
jrg_jeff by • L0 Member
  • 7220 Views
  • 2 replies
  • 1 Likes

Global Protect - Redirection via Arbitrary Host Header Manipulation

Having ran a PCI DSS compliance scan it has come back that our Global Protect VPN setup is flagged as a failing vulnerability for Redirection via Arbitrary Host Header Manipulation. We have it setup to redirect to azure to authenticate account details. The solution they have given us to fix the issue is; Implementing proper validation and sa...

Arachen by • L0 Member
  • 8789 Views
  • 8 replies
  • 3 Likes

Resolved! Problems with pre-logon with machine certificate

Hi! We have problems with a customer that uses GP and pre-logon with machine certificate. It works for a couple of days, GP connects when you start your computer and works as intended. But stops working after a while. I can see these entries in the logs, the application seems to have som problems with the machine certificate: P13676-T145...

Need Guidance on Updating Google SAML Cert

We're using Google SAML for our GP 2FA, and the certificate is nearing its expiration date. I'm looking for guidance on how to go about updating the cert. Discover a world of modified WhatsApp experiences with GBGenie. We specialize in providing a curated selection of WhatsApp mods and modded apps, packed with unique features and functionalities...

jessalex by • L0 Member
  • 1264 Views
  • 1 replies
  • 0 Likes

Using Hash to Bring over User VPN Passwords

Hello Everyone, I am setting up a new PA460 and have a decent amount of users I set up. I have all the users set up and gave them new passwords. I was wondering, (on my current device) if I take the Password Hash from the user section in the Firewall's config using Notepad++, couldn't I simply copy the hash and paste that in as a hash for the ...

GlobalProtect Issues with Hotspot Users

Two different users reported problems when connecting to GlobalProtect when using an iPhone as a hotspot. The users can connect to GP, but are then unable to use HTTPS or ssh to connect to internal assets via the VPN. If the user uses the same laptop and connects via wifi (not using hotspot), GP works fine. Tests with several other users usin...

peppywoll_0-1610157455136.png

[RFC5746] issue with ssl decryption: openssl3.0 unsafe legacy renegotiation disabled

Since I upgraded to the lastest fedora, all of my python/ansible script failed when they are decrypted by our palo alto ssl outbound policy. After some diging, fedora 35 was using openssl 1.1.1 and fedora 36 switched to openssl 3.0: https://fedoraproject.org/wiki/Changes/OpenSSL3.0 On the openssl 3.0 changelog, we can find this: OPENSSL chan...

Internal host detection issue

Hello, Current setup is a 440 running 10.1.10-h2. Global Protect version is 6.1.2 I have double and triple checked that it's not a reverse dns issue, following this article: GlobalProtect app fails to detect Internal Network with Interna... - Knowledge Base - Palo Alto Networks global protect tries to connect internally to the vpn it fails wi...

MNoble by • L2 Linker
  • 3819 Views
  • 4 replies
  • 0 Likes

Updating new Poral name (GW) to all existing Global Protect users

Hi,I already have almost 1500 users using Global Protect VPN Client. Currently our users are using gateway portal name (Eg :123.vpn.com.)We have implemented a new cloud VPN gateway (eg abcd.cloudvpn.com) and now we want all users to use the new cloud VPN gateway.Is there a way to push the new gateway name to all users VPN client settings so the ...

muja1913 by • L0 Member
  • 1081 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect MFA Looping

Hello, I am facing a weird issue with Global Protect where after a user authenticates via Okta Radius to the Portal and enters their MFA SMS Key the GP Agent asks for the user to enter the MFA SMS Key again with the response of ('A message was sent or a call was made to the phone in the past 30 seconds. Please try again when 30 secs have passed....

  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks