This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Split Tunnel by Domain Name is not working

I've read a few posts on Split Tunnel by Domain Name. But so far I am only able to get specific routes to work and not split tunneling by domain name. My test is ipchicken.comas traffic to it will reveal either my home IP as the source or the corporate public subnet. I added to INCLDE *.ipchicken.com without specifying ports. After establishingt...

palomed by • L3 Networker
  • 8448 Views
  • 3 replies
  • 0 Likes

GlobalProtect Prompting Network Filter on macOS

We're running macOS Ventura clients and deploying GlobalProtect 5.2.12-26 We’ve been deploying GlobalProtect for the last year without profiles, No issues. We made a recent change to do HIP checks on endpoints, like verify Jamf is running before you can connect to VPN. We then added an exclusion for a domain and list of IPs to not go through t...

01.png
02.png
03-transparent proxy.png

global protect SAML auth

as per provide KB document we have configure SAML Auth profile but still we are facing issue. ->new user connect via saml but after disconnecting they are not asking any otp, user automatically connect to global protect(remote user are login in cache profile).

GlobalProtect Upgrade Settings

Hello Team! My organization runs several different windows systems, e.g. 7/8/10/11. Some versions of GP do not work on older type 8 systems, the upgrade passes correctly but GP stops working on that system and unsupported versions.https://docs.paloaltonetworks.com/compatibility-matrix/globalprotect/where-can-i-install-the-globalprotect-appIs t...

Pre-tunnel latency vs Post-tunnel latency GP Logs

Hello,I am looking to understand a new feature of Prisma Access and the GlobalProtect client, which is the reporting of latency. I have read a few articles provide what the feature Is, but I would like to know the difference between pre-tunnel latency and post-tunnel latency. For instance, I see the following in the logs:Pre-tunnel latency: 74ms...

Connect before logon status disconnected

We have setup Connect before logon and was successful creating the VPN connection vioa the network sign-in option and logged into the device the first time, however as soon as they reboot the device the globalprotect staus changes to 'disconnected' and the user cannot re-open the connection and continue to login to the device. Any ideas?

Bishopg1 by • L0 Member
  • 2268 Views
  • 1 replies
  • 0 Likes

Resolved! Difference Between GlobalProtect Portal and GlobalProtect Gateway

Read few of the docs but never understood the difference between the GP Portal and GP GW. Is there any way we can compare this with other vendor products and co-relate it? For example Cisco Anyconnect, Checkpoint Endpoint Security. I wanted to know the actual difference and why few customers configure both Portal and Gateway. Is it really necess...

PC take few attempts to connect to GP

Hi Community, We have few users who complain that it takes few tries to connect to GP 5.2.5.We are running PAN OS 9.1.8 Firewall does not show any logs for failed attempts.why is that?It only shows successfull connection attempt. Below are the logs of from GP agent we are using pre logon then on demand P5188-T16948)Debug(3690): 07/15/21 08:44:0...

Global Protec

We are migrating from Cisco any connect to Global protect. From our cisco any connect all SAP applications from Juniper Pulse VPN are working. However when we connect on Global protect all SAP applications are working except https://sap-portal.juniper.net. The policies are allowed correct and all routes are correct, split tunnels also are set co...

weezy by • L3 Networker
  • 6798 Views
  • 12 replies
  • 0 Likes

GlobalProtect average bandwidth usage per user

Hi, I would like to measure how much bandwidth a vpn user consumes per day on average. Is there a way to do this using built in tools or snmp. I know the ACC monitor tab kan filter out applications used and amount of data transfered but this is not what I am looking for. Any hints tips welcome.

GOMEZZZ by • L2 Linker
  • 3153 Views
  • 1 replies
  • 0 Likes

CPanGPADlg::OnTimer - about refresh configruation

Anyone know what this log indicates in the GP client logs? We are investigating reports of unexpected GP disconnects, and in many cases the disconnect seems to start with this sequence: 15:32:38:033 --Set state to Disconnecting... . . . 15:32:36:375 ----Portal refresh configuration starts----15:32:36:375 msgtype = refresh-configuration15:32:...

Windows Update HIP Check

i saw another user is having pretty much the same problem as me, but her post was over a year ago. was hoping some other users might have had the same problem as me. here's the original post: https://live.paloaltonetworks.com/t5/globalprotect-discussions/hip-check-patch-management/td-p/449066 essentially what we would like to do is.... 1, ch...

wcoulson_1-1673983372475.png
wcoulson_2-1673983424218.png
wcoulson by • L0 Member
  • 4248 Views
  • 1 replies
  • 0 Likes

Global Protect - valid certificate client is required

Hi all of a sudden at the beginning of this week, our Global protect clietns have been failing with "valid certificate client is required" the environment is set for machine cert auth (windows adcs) now, to get around this issue we have turned off CRL in the certificate profile, but still at a loss tried the latsst version of gp client check...

  • 1683 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks