Resolved! CRL for Globalprotect
Hi, greetings.
Is there a way to use the CLR to verify the machine/user certificate through globalprotect, to drop connections if the certificate is revoked?
Hi, greetings.
Is there a way to use the CLR to verify the machine/user certificate through globalprotect, to drop connections if the certificate is revoked?
Has anyone had any success setting 2fa for local database users? If so what product/options did you use?
I am testing changing our authentication for GlobalProtect from AD LDAP on premises servers to using Azure AD saml. I have the authentication working fine at the portal; the system logs show successful authentication. But then I get "Could not verif
...
So my company has switched VPN providers. Whenever I connect and launch Global Protect VPN it says
"You must enable automatic Windows Updates in order to access the xxxx Network. In addition, all recent patches must be installed to ensure security."
...
We have an issue that we have logged a PA TAC case but wanted to stick out a forum post to see if others are having this issue.
It seems when the machine upgrades Sophos from 2.20.11 to 2.20.13, we get the following message:
"Your AntiVirus is not up
...
I am using GlobalProtect to connect to an overseas server's VPN.
If I connect my VPN-connected PC via RDP from the outside, the VPN connection is disconnected. Is there a way to connect both VPN and RDP?
Hi,
I am looking for the way to integrate Global Protect MFA with Microsoft Authenticator App. Please note that I need to local user database of the firewall for the authentication and Microsoft Authenticator App for the second factor.
Please help
...
We are using SAML authentication via The Global Protect Enterprise application in Azure. E everything is functioning as expected except for the logging is incorrect. The user login logs show the OS as Windows 8 when a Windows 10 user logs in. If you
...
Hi,
On macOS GlobalProtect disconnection messages pop up in it's own little window in the upper right corner of my screen. The application should use macOS native notification system so that I have control over these and can get them in notificatio
...
Hi All,
We are planning to enable SAML(OKTA) authentication for GP Portal and GP GW in our environment. Below are my queries.
How to use the Hostnames instead of IP address to connect from the GlobalProtect. Where is the settings to configure a domai
...
Hello,
I originally posted this in the general discussion and moved it here where it's more appropriate. Sorry for the mistake.
I'm new and look forward to learning more about the community and Global Protect. I hope I can help in some areas as
Hello everyone,
We have configured a new set-up for GlobalProtect which use Auzre SAML authentication and Microsoft Authenticator
It's all working fine with the exception of this weird behavior:
- User connect to the portal with SAML authenticatio
...
Hello team,
I have an issue with the exchage key ECDHE size with Global protect.
Our Qualys scans show that we accept keys of insufficient size in ECDHE.
The problem is that on our equipment, we obviously cannot set the size of the keys.
When I che
...
Hello all,
How do I perform the Enforce Global Protect Connection for Network Access functionality on the MAC?
It works fine in Windows but not in MAC.
Is it possible to control through the Hip profile function?
Thanks,
I have configure a security policy for global protect access.
the security policy I added below app-id
panos-global-protect
panos-web-interface
SSL
From my traffic log I can see my firewall is allow port 4443 traffic for this security rules. From
...| Subject | Likes |
|---|---|
| 1 Like | |
| 1 Like | |
| 1 Like | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |

