I have never created a vpn with local users on the PA to use the VPN before but I would think the only thing different is the auth profile but I am still getting this error
Planning on upgrading to 10.2.x this week and noticed this release note. Does this mean SAML is broken in this code release? Or am I reading it incorrectly? Also, the version number looks like a firewall version number, not a GlobalProtect app version number. Not sure what to make of this and whether GlobalProtect using SAML auth will work...
I'm seeing multiple failed login attempts from China & Russia. I know I can restrict access to source countries with GP Gateway which I'm currently doing but how can I do this with the Global Protect Portal?
Dear Team, I need a GlobalProtect certificate for IOS. The following error was confirmed in GP.log, and we solved the problem by installing it manually. However, we want to make the certificate automatically installed on IOS as well. In the current setup, Windows or Android will automatically install the certificate. I checked the gp l...
Currently FW used 5.2.11.The team have proposed to perfrom upgrade to next available stable version because there is a scanning internall and detected vulnerabilities for current version.Question : What version is next in line in term of stable, secure and worked.How should I approach this, as all user machine is using 5.2.11. Need to do testing...
Like many organizations, we have had to enable VPN access for more individuals during the COVID-19 crisis. We recently noticed that about half of the 42 machines display their home's local LAN IP address in our DNS server. This is in addition to the IP address that GlobalProtect issues. One of my sysadmins pointed out a way to fix this is to dis...
All remote computers are connected via GlobalProtect single subnet. Let's say 172.16.1.0/24. This subnet is configured on the Palo as an IP Pool. Clients can successfully connect to GlobalProtect and access non-GP internal resources located in different local subnet (servers, other PC's). Internal subnet is 192.168.1.0/24. But... Computers on th...
Hi. I have GlobalProtect 6.0.5-30 successfully installed on Win10 (no installation errors reported). However, the network driver - PanGpd - wasn't installed correctly, and when I try to connect in GP, nothing happens. This is in C:\Windows\INF\setupapi.dev.log, when the driver is installed. At the end, it removes the driver and fails with 0x8007...
Hi all, We've configured a few app settings for GlobalProtect and my assumption is, that when you make a connection to VPN, your client will pull down these app settings. However, if you connect to another VPN (another environment) with different app settings, how do they reconcile? What settings take precedence ? Thanks
Hi all I have an issue noticed that DNS-based traffic shows incomplete when users are connected to GlobalProtect.The same traffic is fine when we disconnect from GlobalProtect
Hi All,We have recently configurated a Global Protect VPN in our environment. As we extended it to more people we started facing few issues:1. Not able to join zoom meetings.2. outlook shows disconnected3. Can not sign-in into skype4. Suddenly internet connectivity drops and have to reboot the machine. We are running global protect on PA- 850 (8...
Hi Friends, We have a customer who is facing issues while accessing RDP via Global Protect. User is not able to access the RDP machine after connecting to RDP. We have tried by adding the RDP ip in the include list. We have also tried by creating a specific policy for ms-rdp. It is hitting the correct rule but unable to access. For the logs we...
Hello,I am looking at setting up a remote access VPN on a PA220. The idea, however, is that the user would have concurrent access to a server at the PA220's site as well as servers at another site, that the PA220 has a IPSEC VPN with. Here is a diagram: In case this isn't clear.... the WAN interface of the PA220 would service both the remote ac...
Hi - we're all working remotely now - so I've connected GlobalProtect to reach resources on our domain. I was a little confused when I ran a ping scan on a particular subnet and all the devices returned the same MAC address along with the IP address, 02:50:41:00:00:02. I did a bit of research and learned that the GlobalProtect virtual ethernet a...
Hello, we are installing a new cluster of vm palo, and we have configure Globalprotect acces. We can connect to the portal, but when we connect, we have this message : Can someone tell us why we have this message ? and what is the impact of this change of connection type ? We use the Globalprotect 6.1.2 version. Thanks
MP18
on:
GPVPN Issue
MP18
on:
Pre-Logon Behavior with SAML Login
Raido_Rattameis
