This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! 2FA and certificate

Hello friends. For my workers, I am using 2FA (AD+DUO) as the authentication process. I would like to add additional to the 2FA authentication, by enforcing checking the existence of a client certificate. My goal is to eliminate using GP from laptops that don't have my PFX installed. (i will install them manually). I want the cert to be an addit...

chens by • L3 Networker
  • 1946 Views
  • 1 replies
  • 0 Likes

Issu Connection Internet

In Palo Alto PA-220 We implemented a GlobalProtect VPN setup and a Palo Alto version 10 firmware upgradeAfter one month of implementing GP and upgrading PAN OS Version 10, our internet connection was slowInternet traffic is always highHigh CPU Device LoadIs this problem caused by:GlobalProtect VPN implementationUpgrade firmware Please get inform...

Sobbirin by • L0 Member
  • 1278 Views
  • 2 replies
  • 0 Likes

PAN-221857 Known Issue - Users are unable to log in to the GlobalProtect app using SAML

Planning on upgrading to 10.2.x this week and noticed this release note. Does this mean SAML is broken in this code release? Or am I reading it incorrectly? Also, the version number looks like a firewall version number, not a GlobalProtect app version number. Not sure what to make of this and whether GlobalProtect using SAML auth will work...

GlobalProtect certificate for IOS(apple)

Dear Team, I need a GlobalProtect certificate for IOS. The following error was confirmed in GP.log, and we solved the problem by installing it manually. However, we want to make the certificate automatically installed on IOS as well. In the current setup, Windows or Android will automatically install the certificate. I checked the gp l...

Resolved! Need to upgrade to next available GP version

Currently FW used 5.2.11.The team have proposed to perfrom upgrade to next available stable version because there is a scanning internall and detected vulnerabilities for current version.Question : What version is next in line in term of stable, secure and worked.How should I approach this, as all user machine is using 5.2.11. Need to do testing...

Resolved! GlobalProtect Clients Home IP's showing up in DNS

Like many organizations, we have had to enable VPN access for more individuals during the COVID-19 crisis. We recently noticed that about half of the 42 machines display their home's local LAN IP address in our DNS server. This is in addition to the IP address that GlobalProtect issues. One of my sysadmins pointed out a way to fix this is to dis...

nic setting.png
Fr4nk4 by • L2 Linker
  • 13897 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect clients need to talk to each other

All remote computers are connected via GlobalProtect single subnet. Let's say 172.16.1.0/24. This subnet is configured on the Palo as an IP Pool. Clients can successfully connect to GlobalProtect and access non-GP internal resources located in different local subnet (servers, other PC's). Internal subnet is 192.168.1.0/24. But... Computers on th...

Resolved! Can't connect - network driver can't be installed

Hi. I have GlobalProtect 6.0.5-30 successfully installed on Win10 (no installation errors reported). However, the network driver - PanGpd - wasn't installed correctly, and when I try to connect in GP, nothing happens. This is in C:\Windows\INF\setupapi.dev.log, when the driver is installed. At the end, it removes the driver and fails with 0x8007...

AndWei by • L1 Bithead
  • 7277 Views
  • 4 replies
  • 0 Likes

Resolved! GlobalProtect App Settings and Multiple environments.

Hi all, We've configured a few app settings for GlobalProtect and my assumption is, that when you make a connection to VPN, your client will pull down these app settings. However, if you connect to another VPN (another environment) with different app settings, how do they reconcile? What settings take precedence ? Thanks

Global Protect Connected but no internet connectivity

Hi All,We have recently configurated a Global Protect VPN in our environment. As we extended it to more people we started facing few issues:1. Not able to join zoom meetings.2. outlook shows disconnected3. Can not sign-in into skype4. Suddenly internet connectivity drops and have to reboot the machine. We are running global protect on PA- 850 (8...

After connecting to Global Protect unable to use RDP

Hi Friends, We have a customer who is facing issues while accessing RDP via Global Protect. User is not able to access the RDP machine after connecting to RDP. We have tried by adding the RDP ip in the include list. We have also tried by creating a specific policy for ms-rdp. It is hitting the correct rule but unable to access. For the logs we...

Screenshot (124).png

Resolved! Remote Access through IPSEC

Hello,I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with. Here is a diagram: In case this isn't clear.... the WAN interface of the PA220 would service both the remote ac...

nwnetadmin_0-1606956535595.png
  • 1703 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks