This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Panoram XML API - remove users from Global Protect

I am trying to figure out how to remove users from Global Protect using Panorama API. This is needed for both users connected to Prisma Access and to local firewalls. Logout_mobile_user from Prisma Access: For Prisma Access, I think I know what is needed but I have a question about defining the user for the Gateway and for the Portal. Logou...

John_J_0-1704822109780.png
John_J_1-1704822361911.png
John_J by • L1 Bithead
  • 1923 Views
  • 1 replies
  • 0 Likes

Global Protect not working MacOS with Xfinity

Hello, I have a few users who have MacOS where GP works everywhere else except on their home Xfinity network, including me on my own Mac when I didn't believe them at first. From what I can tell from the small amount of users, it only affects newer Mac's running Ventura or Sonoma. I have tried 2 different versions of GP clients, 5.2.x (Ventura...

IamgROOT by • L0 Member
  • 3453 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect connecting but shows Gateway IP as the username

I am testing pre logon with GlobalProtect and see an odd behavior with the username showing as the Gateway IP on the GlobalProtect client and on the firewall under GlobalProtect>Gateways>Remote Users. Under Monitor>User-ID it also shows the user as the Gateway IP for the data source vpn-client and souce type globalprotect. I have inst...

A valid client certificate is required for authentication - PanOS:9.1.16-h3

Hello Team We recently upgraded to 9.1.16-h3 on Dec 15th and we started having issues with Global Protect where users are not able to authenticate using the certificate. We have checked and made sure that the correct with its private key is present in the User's Personal Cert Store and has the correct "subject" in the certificate as well. We k...

PAN OS 9.1.17 Global Protect Issues

I upgraded from PAN OS 9.1.14 to 9.1.17 on Dec 27, 2023 Ever since the upgrade, I have random users that cannot connect through VPN GP at the first time. Some users experience connect disconnect issues as well. Some users are working just fine. We have different GP versions from 5.1 to 6.0 to 6.2 - all have shown the same problem. We authe...

lestrada by • L2 Linker
  • 2065 Views
  • 2 replies
  • 1 Likes

GP VPN fail on iphone ios

Hi, I face with issue GP VPN fail to login on iphone ios 15.8. The error show Portal login, error = The certificate for this server is invalid. You might be connecting to a server that is pretending to be “119.x.x.x” which could put your confidential information at risk. I attached picture as well. anyone face same issue?

GlobalProtect 6.1.0 for Linux Fedora 39

hi all, Our EU is currently on GlobalProtect 6.1.0 on PA-5250 firewall, we just wondered if this GP 6.1 support Linux Fedora 39? I tried to find any legit resources that would mention this but couldnt find anything helpful. Would like to share the information to our EU, hopefully anyone could help. thanks!

How to validate user/endpoint is fetching which profile from GP Portal Agent configuration.

Hello Team, I have configured multiple agent profiles in the GP Portal and I want to verify which agent profile is currently being fetched by individual user, How do i verify that from the firewall or endpoint? Context: I have profile 1 which has a limited set of exception users who have some flexibility to switch the portal to add a new port...

GlobalProtect 6.2.2 connects automatically despite on-demand is enabled

Hello everyone, After upgrading GlobalProtect from 5.x to 6.2.2 users started to complain that GP is connecting automatically after logging in to OS. Agent App configuration hasn't been changed and still is On-demand. There is addressed issue in GP 6.2.1 which should solve this (GPC-18336 - Fixed an issue where the GlobalProtect app got automa...

MarRoz by • L0 Member
  • 2718 Views
  • 1 replies
  • 0 Likes

HIP Checks failing GP failing GP users called in ACL's when source device is Apple

Hi All, So I have Global Protect running with the HIP license. Our current conditions for HIP connectivity are; 1. Must be Windows 10 or 11, must have Crowdstrike installed and running, must have Zscaler Client Connector installed and running. I have no problems with any of these users. However, we have a very small subset of users on Macb...

dromanelli_0-1702919699035.png
dromanelli_1-1702919744847.png
dromanelli_2-1702920160790.png

Global Protect on macOS Sonoma 14.2 (betas and now release)

I generally try to run macOS beta version to jump ahead of any issues. I've been running macOS Sonoma 14.2 beta (2 and 4, specifically). In my testing, the Global Protect VPN client successfully connects (we're using certificates on in this case) but then fails to pass any traffic. The interface has an IP address, which can be pinging, but no...

SAML Authentication - Users not prompted for password or MFA

Hi all, We've setup SAML / SSO and all works OK , however, when GlobalProtect starts, it automatically connects without asking for any creds. I'm assuming this is a result of the machine being joined to the same domain so the password is not needed. However, I'd like to configure it so that at least an MFA prompt occurs. Connecting on a non j...

  • 1711 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks