This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! linux /etc/iproute2/rt_tables filled with 231 pangp.include and 232 pangp.exclude

system:* fedora 43 x86-64 fully patched* GP client 6.3.3the linux file for giving routing tables a name is getting stuffed with the same things over and over. there were over 2100 duplicate entries!!# head /etc/iproute2/rt_tables 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp.include 232 pangp.exclude 231 pangp...

Resolved! Disable Global Protect Auto Start on Windows

Anyone know how to disable the Global Protect agent auto start on windows machines? We want our users to have to manually start Global Protect when they need/want to connect to the VPN while out of the office, instead of it starting itself and trying to connect the VPN automatically. We are sure its a regedit key but can't seem to find it in...

Getting 'Unidentified network' when connected to Global Protect - 6.2.8

Hi Team,There is one user who has windows 11 OSThe user is getting unidentified network after connecting to GP vpnGP version - 6.2.8 -263Does anyone know how to resolve this issue ? and what is causing it ?Tried ipconfig /renew - but didn't resolveDisabled IPv6 for both wifi adapter and PANGP adapter - but didn't resolve eitherUninstall and rei...

PA Global Protect

I have 4 portals and 4 gateways (4 different PA fw/vm ) of a GlobalProtect. PA is integrated with azure (an azure app per each gateway).I added one more new portal and one more new subnet to the one of the existing gateways, a new dns a-record and a new azure app. ISSUE: Clients can't connect to this portal, it's getting stuck after connection a...

Resolved! GlobalProtect and Windows Hello for Business

Has anyone successfully implemented Windows Hello for Business with GlobalProtect in a Passwordless configuration. We in the middle of a Passwordless implementation. We are discovering that when you use your Biometric or PIN to authenticate, that GlobalProtect still relies on a password once signed into the PC. We have enabled Prelogon set up to...

[SOLVED] - NGFW The Connection To Global Protect On The IPads Times Out!!

Hello team, I created this post to share my experience resolving recent issues related to GlobalProtect on iPad devices. We have some users with iPads who attempted to connect to GlobalProtect using SAML-based authentication; however, after the users logged in with their credentials, the GlobalProtect application displayed the following error "C...

DanielSRomero_1-1765512275788.png
DanielSRomero_2-1765512424721.png
DanielSRomero_0-1765513227125.png

SAML Authentication with Shibboleth error : idp has no assertion

Hello, We are setting up global protect with SAML SSO with a shibboleth IdP. But we post back to global protect after authentication we do have IdP has no assertion. SAML Tracer shows an encryted assertion but does not seems to handle it. Is there any way to have a more verbose / debug log of SAML Authentication ? Is there any cypher protocol r...

S.DR18 by • L0 Member
  • 1559 Views
  • 1 replies
  • 0 Likes

Global Protect - ARM client

As stated with this link, a client version of GlobalProtect for ARM has been released GlobalProtect fails to connect on windows 11 ARM64 with error message: Could not connect to the GlobalProtect service. As I migrated to a new machine (ARM processor , a Mac Studio M2 Ultra) from an old one from 2015, I need this client to connect to 2 network...

ddregs by • L0 Member
  • 32873 Views
  • 7 replies
  • 0 Likes

Resolved! Need a setting to change interfaceMetric 1 to a higher value

Hi Community.Every time when GP connects it sets its interfcaceMetric to 1. However, I have a nested VPN with even higher priority so every time I have to manually change the PANGP interface metric to a higher value e.g. 400. My wired connection already has metric 8500. Do you know if there's a setting for that?

[Let me know reason & workaround] Global Protect Agent ver6.3.3 “PanPUAC_xxx.dat” does not work (auto create or renew, failed to open).

- Let me know reason why “PanPUAC_xxx.dat” does not work (auto create or renew, failed to open), after Windows Update, BIOS Update. - Let me know workaround. -pan_gp_event.log Ex) -Failed to open file C:\xxx\Palo Alto Networks\GlobalProtect\PanPUAC_xxx.dat -Portal status is User authentication failed -Retry connect failed first time Best reg...

RADIUS flows for Authenticating GP with username, password and OTP

Hello, I have a working GP configuration that uses client certificate, username and password for authentication, with the username and password validated using PEAP-MSCHAPv2 against a RADIUS server. I want to add an OTP challenge as described at https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8ICAS, for the on demand ...

Global Protect and Microsoft Teams e911

Microsoft Teams e911 calling does not display the location when connected to Global Protect. We have split tunneled the Microsoft Teams subnets (i.e. 52.112.0.0/14, 52.122.0.0/15, 52.238.119.141/32, 52.244.160.207/32) as per the Microsoft 365 URLs and IP address ranges (https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-addre...

  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks