Global Protect Choking Internet Access?

To begin with, I am not an IT person but simply an end user in a big company...

I work from home and my ISP subscription is 25Mbps download and 5Mbps upload. I am using Bell Wireless Home Internet in Canada - it is a cell phone connected service. My

PCI compliance ECDHE/RSA

There were a couple of discussions on this months ago with no resolution. SecureTrust's PCI scans say that we are failing. We would need to set both RSA and ECDHE to 2048 but there is no option to do so that I know of for the SSL/TLS profile.  The wo

Global Protect Notification before disconnect before the login timeout

Hi, 

We have by company policy a Global Protect VPN login timeout of 24 hours. However, with Cisco Anyconnect users got a notification at least 1 hour before they were going to be disconnected. I am checking to see if there is a way to have some sort

11618 - TCP/IP SYN+FIN Packet Filtering Weakness resolution

VA scan flag out the below for GP Portal URL

11618 - TCP/IP SYN+FIN Packet Filtering Weakness
-
Synopsis
It may be possible to bypass firewall rules.

Description
The remote host does not discard TCP SYN packets that have the FIN flag set.

Depending on the

How to launch GlobalProtect App with its URL scheme/deeplink on iPhone?

Hello everyone,

I have a question whether or not GlobalProtect Mobile App provides a way such as Url scheme/deep linking/universal link which is able to be launched by the custom website on safari or other mobile apps.

Our business background is:

GlobalProtect: Using an alternative port

Good morning.

I require a bit of assistance for deploying GlobalProtect with a twist.

A client of ours wishes to deploy Global Protect but unfortunately, they also have a Web Facing application using SSL on the same ISP interface.

This is unfortu

Browser behavior when using SAML authentication with GlobalProtect

We recently changed from using our internal AD for authentication to GP external portal/gateway to using SAML authentication with MFA using Azure AD.

The testing for company users was fairly consistent but involves a lot of browser activity (prompt

how to import cert on palo alto

I have a cert that expire today

how can I import cert to global protect?

Inactivity logout on missing HIP check after Windows update

We have been having an issue with a handful of random always-on GP clients (out of ~250) getting automatically logged out of the Gateway every 3 hours after monthly Windows update cycles. Looking at logging, the client stops hourly HIP check reportin

Global Protect Windows logon PIN/Password

Hi,

I am currently on GP 5.2.10 & I logon to Windows 11 via a PIN.

When I upgrade to 6.1.0 my windows 11 laptop defaults to password & I have to change it to PIN and then logon. When I revert back to 5.2.10 it defaults to PIN logon.

Is there a

Getting connection failed

Hello all, 

 Our laptops are seeing the issue where they are working remotely and when the user tries to vpn back in its saying

Connection Failed

the network connection is unreachable or the portal is unresponsive. Check the network connection and rec

IOS + User logon (Always On) + SAML is not working...

>Founf this in the release note: GPC-6663

The GlobalProtect app for iOS does not support SAML authentication when you configure GlobalProtect with the User-logon (Always On) Connect Method (NetworkGlobalProtectPortals<portal-config>Agent<agent-config

Global protect licence

Hello,
Could you please tell me why every user who connects to vpn with global protect must have a license on Pointsharp?

Thank you very much.

Problems connecting to Globalprotect after users install latest windows Cumulative updates

There seems to be a bit of an issue connecting to Globalprotect after our windows machines have the latest microsoft cumulative updates, KB5018410 (windows 10) and KB5018418 (windows 11).

Looking in reddit it looks like other users are seeing the sam