Global protect authentication

Hello Team,

I have one question with GP remote access

Current, I have a global protect remote access VPN running on production

global protect client > when clients connect to publish address gateway on PA 

client require to have as below requirement

Globalprotect first login after install

Hello

Trying to work out if there is any way to automate Globalprotect first login after an install 

These are the parameters I deploy the client with 

msiexec.exe /i GlobalProtect64.msi /quiet CONNECTMETHOD=”pre-logon" LogoutRemoveSSO=”yes” KRBAUTHFAI

Globalprotect Authentication Failure message occur

Globalprotect Authentication Failure message occurs intermittent for user after SAML-Auth successful. 

Is anybody facing this issue and has any resolution?

GP Agent Machine Certificate Check

Hello,

I am trying to find out more information about a GP portal setting called Machine Certificate Check under Portal Configuration / Agent / Agent Config / Config Selection Criteria / Device Checks. I was hoping to use a machine certificate chec

Ubikey and global protect

Hello all,

Do you know if Global Protect is compatible with Okta and Ubikey ?

We got this error message https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HB8lCAG&lang=en_US%E2%80%A9, but even following the KB didn't improve

problem with MS Edge with SAML auth for Global Protect

We have been using SAML authentication with the user default browser for Global Protect for some time now. Within the past month it seems that users with MS Edge as the default browser have been having a lot of trouble authenticating. The SAML comple

GlobalProtect Pre-Logon before user logs in.

we have been using pre-logon for some time and are generally having very few issues.

We now need Pre-Logon to work on newly built laptops using the "Extend Key Usage OID" setting in the GP app.

It works fine but we need it set for when a user first

Clientless VPN Portal Brute Forcing

Hi all, 

I have an issue with a single/multiple threat actors attempting to brute force or clientless vpn portal. They are switching IP's with each attempt and they occur 3-7 time per hour. They use the most ridiculous dictionaries for user names b

GlobalProtect SAML Azure AD Entera ID and cookies

Separate IP pool config for two departments when connecting to global protect

 Is it possible to assign two different IP pools for two departments on one gateway, when the users connect to Global Protect VPN.?

Note: We don't have On-Prem ldap server to config User identification & group-mapping on firewall. We are using Azure

User having issues accessing internet after connecting to Global Protect -- Userid

Hi Team

We are seeing an issue where only 1 user is having issues when going to any websites over Global Protect. DNS lookup completes and the built-in Apps like Outlook, teams work over GP with no issues. The user is able to successfully authentic

GlobalProtect and Smartcard pin caching

Good morning,

I am hoping that someone might have some insight as to GP's pin caching. We have a smartcard portal that validates both pin and username/password but within certain time frames you can reconnect without the pin and just the username/p