PAN-OS 9.1 GlobalProtect CEF Format

Hi,

I'm having issues finding the GP CEF format to send logs to SIEM.  It's not in the documentation. I belive the GP logs were being sent my SYSTEM prior to 9.1 and has changed to it's own log starting in 9.1

How to renew Global protect certificate

Our Palo alto will be depoloyed in cloud, We cannot login firewall without VPN, Now our Global certificate is expired so We cannot login palo alto so please suggest how to do

GW is receiving the routes from the satellites even though those routes were tagged "No Install" on the satellite firewalls

The intended routes, which are tagged "no Install" are not in the routing table of the satellite firewall.

 Locally the tag "no install" is working, but for GP satellite setup it is not working and the routes are propagated anyways, regardless of the

Global Protect VPN not work

We have 2 ISP on the PA220 device and both have configured for the global protect.
We are able to access our recourse form that other ISP but when we try with Airtel it's not working

global protect 4.1.11 allow users to change VPN password?

Hi guys,

I'm currently examining a PA 850 firewall which is providing VPN for remote users to connect.

the global protect client version is 4.1.11-9 and currently there's no user account integration with AD or RADIUS.

The demand is to allow user (accou

Problem with GlobalProtect after certificate renew

Hello there,

Yesterday our certificates used for GlobalProtect expired. I reneved them like last time and then - we lost possibility to connect to our institution from endpoints. Nothing more were changed.

Error seen on endpoint:

Now nobody can conn

GlobalProtect - Client cert not present

This past week we have experienced this issue where users are unable to connect to GlobalProtect. This is happening at random and on multiple firewalls with version 9.1.11-h3, GlobalProtect client version is: 5.2.3

Looking at the logs this is what it

Configurate secundary agent profile with other ip pool

Good morning,

I need configure a secundary agent profile with other ip pool.

I have just configured secondary agent profile in the Global Protect GW with a specific range and two specific users. When the user connects, it does not apply this new profi

Global Protect and Keyboard issues

Hi,

We have a user with Global Protect 5.2.10-6 installed and they cannot type in their password when unlocking their screen or logging on. 

They have an external keyboard, the laptop is on a docking station. When we disable Global Protect, the exter

RPC_binding error when trying to print since GlobalPotect is running

4 weeks ago GlobalProtect was installed in our University and from two Macs (one Monterey 12.2.1) and (Big Sur 11.6.4) I am unable to print on our network printer (smb://), a Canon printer.

When trying to print the printer is paused and the error log

Global Protect VPN with 2 ISP (Active Active)

Hi Guys,

My customer has GSLB ( 1 domain 2 ip address).

Example.  nslookup vpn.test.com 

Name: vpn.test.com
Addresses: 10.10.10.254
                   20.20.20.254

Is it possible to config GlobalProtect VPN with 2 ISP, 2 Portals, 2 Gateways but same cert

Odd GlobalProtect issue

Just completed an install this last weekend and received a report that a user wasn't able to connect to GlobalProtect. I started with the normal troubleshooting and quickly realized this was going to be something more detailed.

The user that initiall