Several client authentication in a Gateway

Hi,

we have a PA-850 running 10.1.8 firmware.

We currently use GlobalProtect VPN using Symantec VIP authentication via RADIUS.

We want to progressively migrate the authentication to Azure AD MFA (already synced with all accounts). I was wondering if

Globalrptect VPN Portal Agen COnfiguration

Hi All,

i am trying to config multiple authentication rules in Portal Agent config. what is the priority on the list when we have mulitple user groups?

i am trying to create multiple user groups with different VPN Client attributes. 

Global Protect multiple gateway setup

I have an existing setup of Global protect Portal and gateway on first Firewall, I have created a New gateway on another Firewall and added that gateway to the portal of first firewall under Agent---> External gateway.

When I am connecting to Global

GlobalProtect Qualys: 150307 External Service interaction via Host Header Injection

Has anyone scanned their GlobalProtect Portals/Gateways with a Qualys WAS scanner?  With GP running version 10.0.x, it's reporting back QID 150307 External Service interaction via Host Header Injection.  

The scanner injects a special FQDN in the Hos

GlobalProtect client doubled in size?

Does anyone know why the latest GlobalProtect client distribution package doubled in size?

5.2.12 103MB  -->  5.2.13 232MB

6.0.3 155MB  -->  6.0.5 283MB

6.1.0 124MB  -->  6.1.1 250MB

Was going to upgrade some GP clients, but in some cases remote in

Why can I still access the company's internal network after the GP client is disconnected？

client终止GPAgent的连接后，ipconfig显示仍然获取到断开前的IP地址（在正确的IP地址池中分配的地址）。同时，仍然可以和内网服务器通信（ping的结果）。
给我的感觉是虽然显示连接中断了，但是实际连接并没有中断。除非你手动切换网络信号（换wifi），或者重启电脑。
我们检查了VMFW的配置，发现没有相关配置。也就是说，这种现象不是预料之中的，所以想排查原因和解决办法。

RSA SecurID Windows MFA Agent stops working when GlobalProtect is installed

We are trying to implement RSA SecurID MFA across our infrastructure, specifically to lock down VPN, cross zone traffic, and essential network assets. On the Window servers and some of the more sensitive mobile devices (Windows laptops) we are instal

GlobalProtect 6.0.0-44 GUI on Ubuntu Linux - starts multiple times, cannot close, general usability problems

So I just changed companies and they use this VPN client.

Issues:

• It starts up multiple times (I currently have 3(!) instances in my task bar)
  • This was due to saving sessions in KDE; adding the process to a blacklist fixed this.  Still, the GUI sho

Microsoft April 2023 Patches Appears to Break GlobalProtect 6.0.3-38 x64 on Win10 22H2 x64

I applied the April patches and rebooted and GlobalProtect is broken.  PanGPS service was not running.  I rolled back to my snapshot before updates and all is well.  I will be doing more testing to see what I can learn, but thought I would post here

Where to view the Global Protect Reason to disconnect Log

Anyone know where can view the log for reson provide by user. 

global protect vpn installation in linux system

Need to install Global protect vpn in Linux system

Hoe can i download Global protect application 6.0.5

Hoe can i download Global protect application 6.0.5

Global protect VPN user Pre-log with User & machine Cert and fall Back to AD server

I am looking for packet flow for VPN user  Prelog in with User & Machine Cert.
if the user & Machine Cert are no available on System User will get authenticated from the AD server and get only internet access. 

TLS Renegotiation

I work for a DoD agency and they are starting to really crack down on TLS Renegotiation.  They are stating that we need to "disable insecure renegotiation: Secure Server not supported" or the offending application will be shutdown.  Our GlobalProtect

Prisma Access + GP AzureAD login

For Global Protect to do SSO against AzureAD, does the workstation needed direct access to AzureAD or does Prisma Access provide route through the system? 

TIA