Many laptop not get internal corporate network while connect to internal network. What the cause and how to fix it.
Our company maintain SAML Authentication using a specific browser (edge), but it is not my default browser (brave).Each time before starting connection I have to switch default browser to Edge and after successful connection have to restore my default browser settings. Is there any way to specify the browser used for SAML Authentication?
By error when I tried to login to global protect, I put an email incorrect, and after when try again to login global protect not show login page, only show page error AADSTS50105. I tried everything like reinstall, delete folder palo alto, delete folder regedit, but get the same error. I want to see the login page to put the correct email. I u...
Hello, I have scheduled all activities for my FW migration from ASA to PA, however I have a question about GP migration. The PA FW has its GP deployed with Public IP x.x.x.6 and gp.domain.com, whereas the ASA has Anyconnect on Public IP x.x.x.5 with asa.domain.com. Both are currently connected to the same ISP; I have disabled Anyconnect, and ...
Hello, I would like to set failed attempts and lockout time on my Global Protect auth profile but I do not see where I can set this. The only place I see these settings is in the global profile but I would like to set this only for Global Protect. I am using v 10.2.4-h2 Thanks for any thoughts. MJF
Hi all, I've recently started to use a GlobalProtect vpn, but every time I successfully connect to it, it blocks my internet access. I reached out to our IT departement and a firewall engineer told me he can see that I am connected and that traffic is being allowed from my location, but return traffic from them is timing out after a couple of pa...
Issue occurs both on Windows 10 & 11. Mostly see it on 10 though and when the user is off site. Rarely do we see the issue on site. User tries to connect to GlobalProtect, window pops up and it's blank - can't type in credentials. GP version: 6.0.3 We've tried uninstalling, deleting the files/folder in Program Files (and x86) and in rege...
I'm trying to set up a global protect gateway on an interface that already has a couple IPSEC VPN tunnels on it. But I am unable to browse to the page to download the client. After some checking I realized that I'm not even able to ping this interface from inside the network or from the public IP of the other PA. If I ping out, then I am getting...
Recently we moved to PA-3410 software version 11.0.1-h2 from PA-850 software version 10.2.3-h4 . on both firewalls GlobalProtect Agent 6.1.1 We have selected option for authentication override On PortalsGenerate cookie for authentication override on Gateway Accept cookie for authentication override https://supportcases.paloaltonetw...
Hi Friends, We have a customer who is using global protect. Two HIP profiles are configured for two different groups. One for AD users and one for Local users. The requirement is if local user tries to login he should get the hip profile banner set up for local user If the ad user login he should get the hip profile banner that is setup for A...
Does anyone know how to go about performing domain validation for an IP address for the GlobalProtect Portal? This is a standard supported by most Certificate providers but I can't find anything about it when searching Palo Alto's site. With this tunnelcrack vulnerability and the need to use an IP address in the SAN of a publicly signed cert,...
Hi All, I got issue that Global Protect session disconnected while I using remote session. As I understanding that I need to set setting "User Switch Tunnel Rename Timeout (sec)". Am I correct? if yet where can I set this setting and guide me please.
Hi Team The customer recently updated one of their firewalls to version 10.2.3 and now when we try to connect to the GlobalProtect client on the end user's machines, we are prompted twice to sign in. The monitoring tab gives a failure with "Authentication failed: empty password". Adding to this, we use Cisco Duo for MFA and we are prompted twi...
Hello valued community, unfortunately, I am still seeking answers for my issue. I have an HIP profile that works when defined as an example for someone establishing a VPN connection using RDP. However, I am unable to achieve results when applied to a WAN rule. Precisely, what I want to achieve is this: If it doesn't meet the conditions specified...
We need to upgrade Global Protect Client from 5.2 to 6.2.7 ,Is the direct upgrade would be possible or do we need to upgrade to any intermittent OS.
PavelK
on:
GP logs
Raido_Rattameis
