This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

How to configure G-Suite SAML authentication for Global Protect

I am trying to set up G-Suite SAML authentication for Global Protect. I followed the directions outlined here to the letter: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UIjCAM I get the following errors: On Google Chrome, I get this error 403. That’s an error. Error: app_not_configured_for_user In Firefox, I ge...

Windows11 fails to connect to Portal with client certificate authentication enabled

I finally got combined certificate and user/pass/MFA authorization for our always-on VPN clients to multiple firewalls (cert auth to the Portal for valid asset checks and auto-login to trigger internal host detection, user/pass/MFA auth to the Gateway for actually establishing the VPN). Moved ~225 Windows10 clients in 1 swoop with only 1 problem...

x-auth support

I am trying to enable x-auth support on my Global Protect Gateway I configured and under Agent>Tunnel Settings , I do not have the "enable x-auth" option, only "enable IPSEC" IS this a GP licensing issue? I read the doc for that and it doesnt mention x-auth as one of the advanced features. Thanks

Resolved! Global Protect SAML Okta groups integration

I'm currently working on setting up our 2 PAs for VPN. I'm trying to get the configuration set up to do something similar to what we had on Cisco but with PA and SAML instead of LDAP. I've followed this doc https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-GlobalProtect.html but in section 8 it doesn't exac...

sirons by • L1 Bithead
  • 4353 Views
  • 1 replies
  • 0 Likes

Global Protect Azure AD MFA

I've recently setup and succesfully tested a new portal and gateway with Azure AD MFA and the global protect app. Currently i can log into my iphone app and I receive the portal auth, (LDAP) and then get prompted for the Microsoft sign in followed by the MFA (SAML), in my case I'm utilizing the MS authenticator app. All is good with this setup ...

danoman2 by • L3 Networker
  • 2609 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect users not able to use internet when they move to office from Home

Hi All, We had configured an GP Portal/Gateway on the firewall. The login method configured on GP is Pre-Logon method and we also had enabled "No Direct Access to local network". The Authentication method used is LDAP. Gateway is configured in Full tunnel mode As the user were working from home previously they will be able to access internet onl...

Resolved! Global Protect Transparent Update

Hi All, I've been testing a transparent upgrade from 5.1.8 to 5.2.9. (only handful of clients) We're a windows 10 site, 1909 + So far so good however I have come across a client that refuses to update. the device prompted the update and informed the user of the process, client restarted and reconnected but stayed on 5.1.8. Looking at the PanGPS ...

Clear Global Protect Cached credentials.

Hi, Is there a way to clear cached Global Protect credentials on a Windows 10 machine? The user has put in the wrong username and every time it goes to reconnect it reverts to the old credentials even though the new ones are successful. Client version is 5.2.11. Thanks

need to reconnect

hey all, i'm having an issue whereby when i'm connected to a hotspot the GP connects fine but when switching to a wireless network it fails. my workaround works as below everyday. please let me know which log file you need for this type of issue. 1.connect to hotspot 2.connect GP 3.connect wifi 4. disconnect hotspot my windows patches, carbo...

eugenes by • L0 Member
  • 2358 Views
  • 2 replies
  • 0 Likes

New GP Client Install

I am installing the GP client 5.2.11 on freshly imaged Windows 10 21h2 devices. Once the client is installed the users are not being logged in by SSO. In the logs it says that the SSO credential capture fails. It has worked previously with older GP clients and Windows versions so I cant figure out what has changed. Here is snippet of the GPS...

JMarberg by • L0 Member
  • 3142 Views
  • 2 replies
  • 0 Likes

Third party SSL cert for Global Protect

I have a third party (Network Soluitions SSL cert that expires in 2023 but validation not past July 22nd of 2022. What is the process from start to finish with the cert and on the firewall? I'm assuming I need to have NS reissue another cert with another request and then follow this article but just wanted to confirm these are the steps? http...

Resolved! SAML Azure Settings for Global Protect

Hi, Does anyone know if it is possible to use IP addresses for the Identifier (Entity ID),Reply URL (Assertion Consumer Service URL), and the Sign on URL instead of URLs for Global Protect using Azure for MFA? Thank You, Marc

Resolved! GlobalProtect problem on Mac when menu bar icon is hidden

I just upgraded from an older MacBook Pro to a newer one. The new MacBook has a smaller menu bar, due to a built-in camera that is housed in a "display notch", which hides part of the menu bar. See https://www.macrumors.com/how-to/hide-notch-macbook-pro/The menu bar displays fewer icons, so some icons are simply "hidden". For apps like GlobalPro...

GlobalProtect quarantine

I am in the process of setting up HIP objects and profiles with the end result being a quarantine for devices that do not match for AV software and definitions along with Windows patch levels. I want to be able to automatically quarantine a device to allow it internet only so the user can fix the issue. I then want the device to be allowed back ...

Resolved! GlobalProtect HIP issues

Hello, I am testing out using HIP match for certain traffic but I am running into an issue where traffic continues to be blocked. I can see the HIP information in the log and firewalls has GP Gateway license. Originally tried to use HIP for just Anti-Malware 'Is Installed' and has 'Real Time Protection' and the traffic never passed even thoug...

COlson by • L2 Linker
  • 5238 Views
  • 2 replies
  • 0 Likes
  • 1695 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks