This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global Protect Users Mapping for two tunnels using SSO

Hi, We have a use case where we want to allow users from the same location using Global protect to be able to access two separate Global Protect Gateways and authenticate using SSO via Azure. The reason is that for the first gateway config we have assigned the split tunnel feature, we would like to have a set of users in the same location be...

PAN GP HIP

This is messing up our EDR solution. This program will run cmd.exe and then whoami /groupsC:\Program Files\Palo Alto Networks\GlobalProtect\PanGpHip.exe Whoami as the Local System authority is a bad thing in our EDR world. Is there anyway to change this behaviour?

KInkster by • L0 Member
  • 12934 Views
  • 3 replies
  • 1 Likes

Resolved! GlobalProtect UI with more than 1 account

Hi all, I'm using GlobalProtect 6.0.4.1 under Ubuntu 22.10. I work with two separate organisations, both of whom use GlobalProtect. So each one has a different server that I need to connect to. After I've configured GlobalProtect with one of them, the server is listed in the window next to "Portal:". It looks like I'm unable to change it. ...

rwanwork by • L1 Bithead
  • 3075 Views
  • 4 replies
  • 0 Likes

Resolved! Gateway certificate error when switching to SAML authentication

I am testing changing our authentication for GlobalProtect from AD LDAP on premises servers to using Azure AD saml. I have the authentication working fine at the portal; the system logs show successful authentication. But then I get "Could not verify the server certificate of the gateway." on the client. The GlobalProtect logs on the firewall s...

rbhoward by • L1 Bithead
  • 4564 Views
  • 3 replies
  • 0 Likes

Gobal Protect VPN says that I need to enable automatic Windows Updates on Windows 11

So my company has switched VPN providers. Whenever I connect and launch Global Protect VPN it says "You must enable automatic Windows Updates in order to access the xxxx Network. In addition, all recent patches must be installed to ensure security." In terms of troubleshooting I have manually edited the policy in gpedit and various places within...

spendl16 by • L0 Member
  • 1905 Views
  • 1 replies
  • 0 Likes

Recent Sophos update has broken HIP checks on Global Protect

We have an issue that we have logged a PA TAC case but wanted to stick out a forum post to see if others are having this issue. It seems when the machine upgrades Sophos from 2.20.11 to 2.20.13, we get the following message: "Your AntiVirus is not updated". HIP checks then fail. The only thing changed is the version of Sophos, but the HIP checks...

Resolved! Palo Alto Global Protect Enterprise App in Azure

We are using SAML authentication via The Global Protect Enterprise application in Azure. E everything is functioning as expected except for the logging is incorrect. The user login logs show the OS as Windows 8 when a Windows 10 user logs in. If you go to the details. in the log entry, The =User agent details show the correct PAN GP version and ...

Carleton_1-1674582931643.png
Carleton_0-1674582811034.png
Carleton by • L3 Networker
  • 3419 Views
  • 3 replies
  • 0 Likes

GlobalProtect should use native macOS notifications

Hi, On macOS GlobalProtect disconnection messages pop up in it's own little window in the upper right corner of my screen. The application should use macOS native notification system so that I have control over these and can get them in notification center like all other apps. Thanks, -Andy GlobalProtect 6.1.0-58

SAML Authentication for GP Portal and GP GW

Hi All, We are planning to enable SAML(OKTA) authentication for GP Portal and GP GW in our environment. Below are my queries. How to use the Hostnames instead of IP address to connect from the GlobalProtect. Where is the settings to configure a domain instead of IP address. In Cisco Anyconnect we call it as Alias. Not sure what we call in Global...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks