i've configure idle timeout (10 minutes) on globalprotect gateway, but it's doesn't work. Can't you help me please about this case ?
Good morning! First time posting here. We are seeing an issue with our GP users in that some cannot connect while other can with out issue. The error that we are seeing is that the agent is unable to establish a connection to the gateways. We several gateways that we use (only US based ones) that are pretty evenly distributed with users that are...
I figured I would start here since this seems like an easy fix. We are working to include certains IPs/domains/apps etc in the tunnel. Currently the only traffic that is routed through the tunnel is internal networks, which operates fine, all other traffic goes out through their own gateway. When we try to include a domain like ipchicken.com, I ...
Hello All, I had a customer reach out to me about when the Microsoft Store would have a newer version of GP . Currently the version available is 5.2.8-5. Does anyone know when version 6 would be available? Thank you in advance. GlobalProtect Please note you are posting a public message where community members and experts can provide ass...
I was able to connect a few weeks prior to this error by uninstalling and reinstalling the GlobalProtect client. However this is no longer working. I'm getting the Server Certificate Error popup: I checked Device/Certificate Management/Certificates and all my certificates have Status of valid. For VPN I have the setting for Username/Passw...
PAN OS 8.1.22 / GlobalProtect Agent 6.0.3 (1) GlobalProtect has no issue connecting to portal/gateway (Dell Latitude, Windows 11) (2) Gateway Access Route (split tunnel)(No direct access to local network is UNTICK) has access to 0.0.0.0/0 (3) VPN users authenticated are assign 10.0.1.1-40 address (4) DNS assignment is 192.168.10.10/24 (dc-01.i...
I ran a packet capture on PAN to try and figure out an intermittent problem with one of my GP 5.2.5.66 users (Windows, Surface Pro) where certain web based or internal applications will just start working. The external are Outlook O365, Teams for example. If he disables GP then everything starts working again. We verified he's connected to VPN d...
Is Global Protect working normally on Windows 11?
Greetings PAN community. Hoping to find someone that has seen this issue already so that I can move forward with my implementation of Intune Baselines. We use Configuration profiles at the moment to manage our fleet where we use the Global Protect client for vpn and OKTA for MFA to complete the connection. I have a test group set up in Azure t...
Hi there, we have global protect with different agent configs based on ad groups enrolled. We have different configs for always on and always on disable on demand since the upgrade to global protect 6.0.3 some users seems to get a different config (always on instead of disable on demand) in PANOS 9.0 you could see in the system logs of t...
Should a user manually disconnect from GP, is there a setting that would automatically reconnect them after a number of minutes/hours, and is this configurable ?
The endpoint having GP client version 5.2.8, is having an issue to connect to Secondary DNS Server for SIP traffic only. The issue is occurring on 5.2.8 when the primary DNS is not reachable. • WFH users connected to VPN gateways, were having primary DNS DC1 and secondary DNS DC2 in VPN setting.• Due to Planned activity Primary DNS DC1 server wa...
Hello friends! Help me please.I need advice on authentication and authorization when connecting to a GP.Is it possible to separate these roles? For example: authenticate using SAML.And then check this user for belonging to groups in LDAP, and depending on these groups, send him to the gateway / send him settings / apply policies. In general, aut...
Hey all - We're currently in the beta-testing phase of our GlobalProtect implementation, and I have a couple of questions around 'best practices' to ensure a good user experience. First, our setup: - PAN-OS 10.1.5-h1 - GlobalProtect client v5.2.11-10 (Mac OS (12.x) & Windows 10) - Pre-logon via machine-based certificates - User logon via Ok...
Hi all, I need a clarify about GP Portal license and GP Gateway license. Which one is needed for clientless VPN?I have this PA-850 and running on PanOS 9.0.13, on support portal it shown that I have GP Gateway license active but GP Portal license is expired. As far as i know we only need Globalprotect license to use more features, but the suppo...
BPry
on:
GlobalProtect v6.3 on Android
BPry
on:
Unable to sign in to GP - Mac OS 27.0.1
MP18
on:
GPVPN Issue
