Separation of profiles for authorization and authentication in GlobalProtect

Hello friends! Help me please.I need advice on authentication and authorization when connecting to a GP.Is it possible to separate these roles? For example: authenticate using SAML.And then check this user for belonging to groups in LDAP, and depending on these groups, send him to the gateway / send him settings / apply policies. In general, aut...

GlobalProtect Always-on User Experience

Hey all - We're currently in the beta-testing phase of our GlobalProtect implementation, and I have a couple of questions around 'best practices' to ensure a good user experience. First, our setup: - PAN-OS 10.1.5-h1 - GlobalProtect client v5.2.11-10 (Mac OS (12.x) & Windows 10) - Pre-logon via machine-based certificates - User logon via Ok...

GlobalProtect License Portal or GP license Gateway?

Hi all, I need a clarify about GP Portal license and GP Gateway license. Which one is needed for clientless VPN?I have this PA-850 and running on PanOS 9.0.13, on support portal it shown that I have GP Gateway license active but GP Portal license is expired. As far as i know we only need Globalprotect license to use more features, but the suppo...

Issues with Global Protect Client pulling focus from other windows

The problem description is similar to this site: https://www.reddit.com/r/paloaltonetworks/comments/qcu48n/issues_with_global_protect_client_pulling_focus/ Apples MAC, GP software version: 6.0.1； When using Word to edit text, GP will take away the cursor, I need to click back to Word;

Global protect SAML with azure need to make the joined PC to access without going to authentication other than to ask for username password via webpa

Global protect SAML with azure need to make the joined PC to access without going to authentication other than to ask for username password via webpage. I done the SAML and enabled the Sigle sign on from agent tab to be ON so the global protect get the username password when user login but the issue when the not joined PC tried it will get the...

System error, contact system administrator.

GlobalProtect Portal error System error, contact system administrator. PAN-OS 10.2

Recommended config for Globalprotect on Azure active-active LB sandwich architecture?

We are running two active-active VM-300s at Azure using the common firewall architecture reference doc (two Azure standard load balancer sandwich). Now looking to enable Globalprotect gateways and was wondering what best practice would be for external access - use a single address on external Azure load balancers and load balance to VM-300s with...

PanGPS consumes much power when MacBook hibernates

I'm using the GlobalProtect in my MacBook Air. When I close the laptop lid, the MacBook will enter deep sleep state, which consumes very little power. But after I installed the GlobalProtect, the MacBook will consumes a lot of power 5 days after I close my laptop lid. I checked the console, it is PanGPS initiates network connection after 5 days ...

GlobalProtect Users Unable to Reach Intranet Resources Every Hour/2hrs

Hello, We have been experiencing an interesting issue where users that connect via GlobalProtect, will all of a sudden no longer be able to access internal resources after about an hour/2hrs of initially connecting. External resources work absolutely fine during this period. The only way to remedy this is to disconnect GP/refresh the connection....

Global Protect VPN Disconnects Local Network Resources After 4 Hours

Apologies if this is a simple fix / stupid question. We have a group of users who need to use the GP VPN to access certain online resources provided by another company. After about 4 hours with the VPN connected, we lose all access to local network resources i.e. network drives). Only shutting down the VPN will bring them back. Is there a ti...

Importing SSL

Hi, I'm new to importing SSL Wildcard Certificates. I'm trying to import a new ssl wildcard to replace the expired ssl wildcard cert. I was able to import new ssl wildcard cert but the firewall will not allow me to add the new ssl wildcard cert to SSL/TLS profile. The old ssl wildcard cert shows with a SSL/TLS profile.But not the new cert. Do ...

Are there any AUTH CERT vulnerabilities with the Global Protect Client version 5.2.11