This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Global Protect SAML Okta groups integration

I'm currently working on setting up our 2 PAs for VPN. I'm trying to get the configuration set up to do something similar to what we had on Cisco but with PA and SAML instead of LDAP. I've followed this doc https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-GlobalProtect.html but in section 8 it doesn't exac...

sirons by • L1 Bithead
  • 4466 Views
  • 1 replies
  • 0 Likes

Global Protect Azure AD MFA

I've recently setup and succesfully tested a new portal and gateway with Azure AD MFA and the global protect app. Currently i can log into my iphone app and I receive the portal auth, (LDAP) and then get prompted for the Microsoft sign in followed by the MFA (SAML), in my case I'm utilizing the MS authenticator app. All is good with this setup ...

danoman2 by • L3 Networker
  • 2687 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect users not able to use internet when they move to office from Home

Hi All, We had configured an GP Portal/Gateway on the firewall. The login method configured on GP is Pre-Logon method and we also had enabled "No Direct Access to local network". The Authentication method used is LDAP. Gateway is configured in Full tunnel mode As the user were working from home previously they will be able to access internet onl...

Resolved! Global Protect Transparent Update

Hi All, I've been testing a transparent upgrade from 5.1.8 to 5.2.9. (only handful of clients) We're a windows 10 site, 1909 + So far so good however I have come across a client that refuses to update. the device prompted the update and informed the user of the process, client restarted and reconnected but stayed on 5.1.8. Looking at the PanGPS ...

Clear Global Protect Cached credentials.

Hi, Is there a way to clear cached Global Protect credentials on a Windows 10 machine? The user has put in the wrong username and every time it goes to reconnect it reverts to the old credentials even though the new ones are successful. Client version is 5.2.11. Thanks

need to reconnect

hey all, i'm having an issue whereby when i'm connected to a hotspot the GP connects fine but when switching to a wireless network it fails. my workaround works as below everyday. please let me know which log file you need for this type of issue. 1.connect to hotspot 2.connect GP 3.connect wifi 4. disconnect hotspot my windows patches, carbo...

eugenes by • L0 Member
  • 2435 Views
  • 2 replies
  • 0 Likes

New GP Client Install

I am installing the GP client 5.2.11 on freshly imaged Windows 10 21h2 devices. Once the client is installed the users are not being logged in by SSO. In the logs it says that the SSO credential capture fails. It has worked previously with older GP clients and Windows versions so I cant figure out what has changed. Here is snippet of the GPS...

JMarberg by • L0 Member
  • 3276 Views
  • 2 replies
  • 0 Likes

Third party SSL cert for Global Protect

I have a third party (Network Soluitions SSL cert that expires in 2023 but validation not past July 22nd of 2022. What is the process from start to finish with the cert and on the firewall? I'm assuming I need to have NS reissue another cert with another request and then follow this article but just wanted to confirm these are the steps? http...

Resolved! SAML Azure Settings for Global Protect

Hi, Does anyone know if it is possible to use IP addresses for the Identifier (Entity ID),Reply URL (Assertion Consumer Service URL), and the Sign on URL instead of URLs for Global Protect using Azure for MFA? Thank You, Marc

Resolved! GlobalProtect problem on Mac when menu bar icon is hidden

I just upgraded from an older MacBook Pro to a newer one. The new MacBook has a smaller menu bar, due to a built-in camera that is housed in a "display notch", which hides part of the menu bar. See https://www.macrumors.com/how-to/hide-notch-macbook-pro/The menu bar displays fewer icons, so some icons are simply "hidden". For apps like GlobalPro...

GlobalProtect quarantine

I am in the process of setting up HIP objects and profiles with the end result being a quarantine for devices that do not match for AV software and definitions along with Windows patch levels. I want to be able to automatically quarantine a device to allow it internet only so the user can fix the issue. I then want the device to be allowed back ...

Resolved! GlobalProtect HIP issues

Hello, I am testing out using HIP match for certain traffic but I am running into an issue where traffic continues to be blocked. I can see the HIP information in the log and firewalls has GP Gateway license. Originally tried to use HIP for just Anti-Malware 'Is Installed' and has 'Real Time Protection' and the traffic never passed even thoug...

COlson by • L2 Linker
  • 5380 Views
  • 2 replies
  • 0 Likes

global protect split dns

my global protect client is 5.2.0-81,my firewall is pa-5020,software version is 8.1.23.my global protect did the tunnel split,and dns split. in globla protect portal, Agent->APP, i configure Split-tunnel Option "Both network Traffic and DNS"，Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only) "NO"。tunnel splittine do...

linfei by • L0 Member
  • 2821 Views
  • 2 replies
  • 0 Likes

Resolved! Split tunnel specific URL only, not entire site?

Good day folks. I have a situation where I need to split-tunnel a specific URL from a company web site - but not the whole site if I can avoid it. For example https://www.mysite.com/admin - split tunneled to VPN clients. https://www.mysite.com - not split tunneled to VPN clients. The /admin/ URL is access list filtered - I have obviously been ab...

darren_g by • L4 Transporter
  • 3231 Views
  • 2 replies
  • 0 Likes

GlobalProtect appweb3 exhaust Mgmt CPU % due to large amount of users

GlobalProtect Hi Everyone, I experienced issue with GlobalProtect. At the start of the day, appweb3 will spike up abnormally to like 95%. From the traffic logs we noticed a lot different user trying to access GP. However the timing was exact the same for all the users and it stretches across many pages. From KB below I understand that the appw...

Wenwei_Y by • L0 Member
  • 2749 Views
  • 2 replies
  • 0 Likes
  • 1722 Posts
  • 67 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks