I want to install GP on my endpoint for testing before deploying to other endpoint. How do I proceede?
Trying to get the GP agent running on linux (Ubuntu 20.04) and keep crashing into SAML auth issues. The GUI client opens a PanGPUI internal browser window that starts to show a google auth page and promptly hangs with 100% CPU utilization, and the CLI opens default browser with a bogus url (like this one: https://accounts.google.com/o/saml2/idp?...
Hi, We have PA-850 with globalprotect 5.2. To make it more clear for our users we would like to customize the logo shown in the portal and whenever the user authenticates correctly. We are using Azure AD via SAML. Currently we do have the default page (attachment). Thanks a lot. Please note you are posting a public message where communi...
Hi All, May i know is it possile to forward global protect logs to SIEM? The current version is 8.1.23-h1 I found the below KB but is for 9.1 and higher. https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/logging-for-globalprotect-in-pan-os/forward-globalprotect-logs-to-an-external-service-in-pan-os May i know if there ...
I'm unable to get the Windows Hello credentials (such as fingerprint/face ID) to passthrough to Global Protect at logon. We have our computer tunnel configured to handoff to the user tunnel 60 seconds after logon, so during the logon process, the connection isn't dropped and re-established. However, if a user uses face id or fingerprint to...
In case other users have had the same problem/need, I kindly ask for your support to be able to use and how to configure the GlobalProtect app from the iPhone so that the vpn connection goes through a pac proxy. In this specific case, I would like that once configured the portal address for the connection with the GlobalProtect app (with relat...
Mac users can connect to the Global protect, after entering in their creds they get the error "connection fail, unable to verify certificate" how ever not all users are experiencing this widows users are fine . any ideas
Hello I discover GP so I'm sorry, in advance, if my questions are stupide. Q1 : How I can force my users to enter their credentials (OnPrem AD or Azure AD depending the auth profile configured) when they start GP protect ? I don't want to use SSO and I want that my user enter their credential each time that they want to start the VPN connexi...
Hi Team, one of our customers has configured spit tunnel with include routes (doesn’t configured domain and application) issue was for windows user working as expected but for MAC user DNS not resolving ( Global produced state was connected ) Action Taken from our side : ++ We suggested update the global product version ( from 5.2.9 to 5.2...
Hello, I'm having trouble setting this up correctly. We have eth1/2 where a PPPoE Connection is available that we use for Internet Traffic from our guest wifi. We also have eth1/14 where our main Connection is running. We have a GP Configuration which allows external Users to connect to via an external IP Address which is then NATted to the ...
first time can connect but after cannot.
Hi I have just installed GlobalProtect and installation and first connect seems to work, but only a few seconds. I get this: The virtual adapter was not set up correctly due to a delay. GlobalProtect will try again soon. If the issue persists, please restart your system. Tried the following: I uninstalled / reinstalled. Stopped WMI, deleting...
To begin with, I am not an IT person but simply an end user in a big company... I work from home and my ISP subscription is 25Mbps download and 5Mbps upload. I am using Bell Wireless Home Internet in Canada - it is a cell phone connected service. My personal computers work very well with these speeds, however... With Global Protect enabled on my...
There were a couple of discussions on this months ago with no resolution. SecureTrust's PCI scans say that we are failing. We would need to set both RSA and ECDHE to 2048 but there is no option to do so that I know of for the SSL/TLS profile. The workaround that was discussed was to disable ECDHE and RSA. However, among other possible issues, ...
VA scan flag out the below for GP Portal URL 11618 - TCP/IP SYN+FIN Packet Filtering Weakness-SynopsisIt may be possible to bypass firewall rules.DescriptionThe remote host does not discard TCP SYN packets that have the FIN flag set.Depending on the kind of firewall you are using, an attacker may use this flaw to bypass its rules. See Alsohttps:...
BPry
on:
Global protect with LOOPBACK Interface
reaper
on:
GlobalProtect Mac Client ENDLESS POPUPS that TAKE FOCUS from other apps
BPry
on:
Semi-Disable Global Protect on Mac
