This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Global Protect & Lack of disconnect/reconnect messages

We are working through a conversion to Global Protect VPN from Anyconnect and have hit the stage where users are griping about how global protect operates (we are connect on demand). #1 Gripe I am getting is that there is no prompt/pop up from GP when it disconnects and also no pop up when it reconnects. I have scoured through the settings and...

GP internal gateway for Azure AD authenticated users

In our on-prem firewalls, some policies are based on user-ID. User-to-IP mapping for the corresponding users are sourced via different mechanisms such as; - User-ID agents installed on domain-controllers - terminal server agents. This setup has been working pretty well so far. However, now we have a challenge after the introduction of Microsof...

bcdomain by • L0 Member
  • 1570 Views
  • 0 replies
  • 0 Likes

Global Protect

Been trying to connect to a client VPN using GP 5.2.13-48. The client auto logs in using my Windows credentials which are not the correct credentials. I try to sign out but the user remains persistent. I can't get the client to prompt for a new username and password. Tried rebooting, re-install etc. Always reverts back to Windows credenti...

GlobalProtect MFA issue with Teams

Hi all, We recently ran into an odd issue where we have a few users who are running into MFA problems because Teams appears to be launching before GlobalProtect can connect. We are working on getting pre login working which will hopefully solve this problem, but in the meantime has anyone else come across this issue? My initial thoughts are to...

bradorr by • L0 Member
  • 1728 Views
  • 0 replies
  • 0 Likes

GlobalProtect client stopped working on Mac:

I started getting the following error message yesterday on Mac running MacOS 13.4.1. GlobalProtect version 5.2.10-6. The computer was upgraded two weeks back and has been working fine connecting to the VPN. User can log into globalprotect.domain. Also when the credentials are being checked properly - when wrong password is entered, the user gets...

GlobalProtect not working in Parallels Windows11 on MacBook Air M2

I'm running Windows 11 with Paralles installed on my MacBook Air M1 2023.I installed Palo Alto Networks GlobalProtect on Windows 11 and tried to use it, but an error is displayed and I cannot use it. Please tell me the solution. ■Error display in GUIconnection failedCould not connect to GlobalProtect service.Make sure GlobalProtect is running....

KENZ2023 by • L0 Member
  • 8804 Views
  • 2 replies
  • 0 Likes

HIP Check Max Wait Time.

Looking for clarification/certainty on a specific issue. I would like to increase my "Max Wait Time" (defaults to 20 seconds) for HIP file submissions by GP because I believe it is submitting before all required HIP objects are running in their required states. My question is as follows: If a security policy is configured to deny access if the...

GlobalProtect Multiple Auth Failed

My GP is only using local database authentication. My goal was for a small group to have access to specific resources and the everyone else to have access to much narrower resources. I created 2 Authentication Profiles: 1 with the limited members and the other with everyone else. The one with limited members I created a local User Group and us...

Unable to install GlobalProtect

Hi, everybody. I am unable to install GlobalProtect (64 bits). I need it to connect to my work VPN. When I open the installer, the following message appears: "There is a problem with this Windows Installer package. A dll required for this install to complete could not be run. Contact your support personnel or package vendor." IT support from m...

nadiasb by • L1 Bithead
  • 14149 Views
  • 6 replies
  • 0 Likes

Restricting the Emergence of Security Threats Act making VPN illegal

Hello, There is a lot of discussion about the recent bill "Restricting the Emergence of Security Threats" (RESTRICT) introduced in the US. My customer is using Sonicwall VPN to access corporate applications. He is concerned that the recent bill (if and when passed) will make it illegal for his company to use VPN to access corporate application...

User vpngroup mapping w/Cloud Identity Engine + Google G Suite/Workspace

Hello all. I just cannot seem to get custom user vpngroup mapping working with Cloud Identity Engine + Google G Suite. My setup: PANOS 10.1.0 Cloud Identity Engine directory setup & working to G Suite My user's vpngroup is set per-user with a G Suite custom text attribute named "vpngroup" Directory is syncing fine between Cloud and my onpre...

ricktait by • L0 Member
  • 1151 Views
  • 0 replies
  • 0 Likes

Global Protect SSL Fallback Time explanation

When looking in the GP>Portal>App settings there is an option for "Automatically Use SSL When IPSec Is Unavailable (hours)". 0 clearly disables the feature. But what exactly are we setting if we put in a number? Is it how long a user will run in SSL before reattempting IPsec? I have dug through the admin guide and cannot seem to locate...

  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks