GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

VPN Login Failures

Hi, I received two kinds of events when I tried to connect VPN. Which event I can consider as a threat. I have excluded the username pre-logon from monitoring but for the destination 0.0.0.0 is receiving. Why destination IP show 0.0.0.0? Can I ignore it? Destination IP as 0.0.0.0 <14>Aug 31 10:00:24 PA-FW1 1,2023/08/31 10:00:24,0163...

Global Protect HIP issues with Jamf Agent

Hi All I am having difficulties with HIP testing from Global protect to detect for Jamf Pro on Macintosh devices. We use the Cloud based Jamf Pro and the only options for HIP Objects for this is either for a plist or Process. Plist is out of the question (Unless someone can hopefully prove me wrong) and the issue with the process that the binary...

Exclude a Application behind Clientless VPN from decryption

Hi all, I am currently facing the problem of publishing an internal web application via GlobalProtect Portal and Clientless VPN. The principle is already used by us and works very well so far. However, this one particular application has a property that makes SSL decryption impossible. With "normal" SSL decryption, you can either set a no-de...

Resolved! Global Protect Not working MacOs Ventura

I use Macbook Pro 14 Inc M1 Pro with MacOS Ventura (13). Running PAN OS 10.2.3 and Global Protect But my global protect not working with this issue P1772-T26627 11/01/2022 07:47:44:451 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767P1772-T26627 11/01/2022 07:47:44:451 Error( 241): Cannot connect to service, error: 61...

GlobalProtect for iOS and Intune data attributes

Hello everyone! I'm currently working on setting up GlobalProtect and having it send appropriate HIP data to the firewall. I got Windows devices working pretty well, but I'm struggling with iOS devices that are managed by Intune According to https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/mob...

Globalprotect tries to connect then goes back to 'Connect' button

Having one computer that has issues with the GP client. I have tried GP version 4.8, 5.2, and 6.1 and various means of having them update or refusing to update etc. I have restarted the computer, uninstalled and deleted app data and Program Files folders. Removed every trace of registry entries. Etc etc This single computer just will not conn...

Apple Mac OS X Ventura 13.5.0 + GlobalProtect App 62.0-89 + SAML authentication

I am authentication through a SAML redirect to Azure and it works perfect with windows users but get this blank pop-up issue when Mac users try to VPN in. I have tried the following advice below with the same results. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP33CAG Use Default Browser for SAML Authentication - Y...

Resolved! How to update the connection GP from gateway

Hello Everyone, I need to add a new URL GP connection to my all GP clients, I'ld like to use the firewall to add the new URL, but I don't find the setting to add URL connection in transparent from my firewall to my 100 clients. Could you help me to identify the settings ? Thank you in advance for your answer. Guillaume

Global Protect & Microsoft Surface Pro 9

Hi, Just a general question. I have a Surface Pro 9 with the ARM64 processor in it, Brand new. This has the AT&T cellular connection in it also, which will be used for the GP. My issue is that it will not connect with this unit. I have other Surfaces with the Intel processors in them and they connect just fine. The Version of GP we are usin...

change portal address remotely

We want to move the users to a different portal adres. How can we do this without asking all users to manualy adjust the portal adres? i've tried changing the reg key set at installation time, but this didn't work (tried rebooting and refresh connection).After the reboot it even changed back!Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Network...

NOC-VL by L1 Bithead
  • 21170 Views
  • 8 replies
  • 0 Likes

Resolved! Globalprotect split tunneling

Hello, I got a question regarding GlobalProtect and DNS. We currently have a setup where the users have an always-on-vpn. We also have some split tunneling enabled, so 10.10.10.0/24 does not enter the tunnel when the users are on-prem (when they are 'on the read', everything is tunneled). The split tunneling is working fine, when visiting a we...

wazaka by L1 Bithead
  • 9420 Views
  • 7 replies
  • 0 Likes

Resolved! Creating DDNS on the Palo Alto firewall (using noip.com), and we are unable to access the GlobalProtect portal

Hello everyone, During a recent migration from SonicWall to Palo Alto, we have encountered an issue with the Dynamic DNS (DDNS) configuration using No-IP.com. Additionally, we are experiencing difficulties accessing the GlobalProtect portal. In SonicWall, there is an option to bind No-IP within the firewall, which is essential as No-IP refreshes...

  • 1702 Posts
  • 68 Subscriptions
Top Solution Authors
Labels