Unable to connect Global Protect VPN

All our users are able to connect to our PA220 using Global Protect VPN except one. We've tried reinstalling the Global Protect client multiple times and also connected successfully using their account from another computer, but it just refuses to wo

Exclude Device from HIP check

Hello,

I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.

My question is if there is a way to exclude a device from this HIP check and it would be allowed to c

GlobalProtect license

Dears,

I hope this message finds you well.

I planning to purchase a GlobalProtect license for enterprise and I have some questions:

How much the price per year?

Which license support the HIP?

Is the license per users?

Thanks in advance, 

Unable to authenticate user to GlobalProtect using OpenLDAP

i've configured the LDAP profile, Authentication profile, User-ID Mapping, GP Portal and Gateway.

But when i use a user from the 'mapped-group', the globalprotect gave me 'authentication failed'

Please advice. TQ

Global Protect Portal browser tab name change

Hi Team,

I have query that can I change the browser tab name for global protect, 

Windows365 and GlobalProtect.

We are setting up a Windows365 environment that, obviously, lives in Azure cloud. These machines are access by RDPing into them. Due to some access management controls and the systems not actually living on our network, the Windows365 machines were h

GlobalProtect and AD LogonWorkstations

Hey all,

Recently we noticed that users connecting via GlobalProtect who are restricted to a device when logging on, are failing with a message in the logs "invalid username or password".  In AD the user has the LogonWorkstations property populated r

Global Protect Clientless displaying blank page

I have multiple servers behind a clientless Global Protect VPN Portal and they all work fine apart form the Demisto (Cortex XSOAR) HTTPS, which shows blank page when browsing to it.

The Demisto server works fine when browsing to it directly  and all o

These few advance GP option will affect Split DNS ?

Anyone know if I enable Split DNS at the same time also enable these 3 feature it will affect my Split DNS configuration or not ? It will follow SplitDNS or follow these 3 options ?

GlobalProtect Welcome screen links - PanGPA.exe authentication

Hi, for long period of time we are using global protect welcome screen including url links to web applications.

Those links are for easy access to internal web applications, lately there was a change on the global protect client behavior which cause

Global Protect client not isolated

If you are using Global Protect AND you have split-tunneling enabled. Your PC is accessible via the local LAN. So if your in an insecure location the other people on that LAN can hack at your computer. If you don't believe me try it out. 

Certificate authentication on Linux

Hello,

Our company requires client certifications in order to be able to connect.  I've created a standard CSR using the openssl command and had it signed by our in-house CA.  Then Imported into globalprotect.    However the portal does not approve t

GlobalProtect Login with okta

hello everyone

Accounts were linked by creating Paloalto NGFW and Okta Saml2.0 Application.
The GlobalProtect login method logs in with the Okta domain.
This works really well.
The login method is Always-on.

What I am curious about is that a user attemp

GlobalProtect appliance PCI Compliance

Hi,

We're trying to get our VPN appliance PCI compliant and not sure what is going on, as it's automatically failing.

Minimum TLS is 1.2 and have disabled all the weak key exchanges. This was done prior to any PCI compliance requirement.

When we