GlobalProtect Portal authentication by certificate fails with "Valid client certificate is required"

I have been trying for some time to get a mutli-stage GP login working in an always-on VPN. Going from an existing user/pass login to both the Portal and Gateway (with third party MFA over radius, cookies to prevent dual auth request), to a certifica

Trying to set access rules for GlobalProtect VPN

We're looking to set up access rules/controls for our VPN, and I'm having some trouble figuring it out.

We already have our gateway and portal set up, and have it whitelisted to only allow specific users through. However, we want to set up a second p

Send message to user after connecting

Hi all,

I'm changing the portal external gw of my company.

I've sent an email to our users but I'm sure they'll never read it, so on switch date they will start calling our help desk because "vpn has stopped working".

Is there any way to send a message

ip pool usage snmp monitoring

Hello,

I want to monitor the usage of each ip pool for global protect with snmp, to have an alarm or something when the pool is reaching limit, i didn´t find an oid for this purpouse, but maybe there is another way to do it, anyone have an idea to ma

Is there a way to delete for force expire a GP cookie?

If I wanted to force testing the certificate and make sure the cookie wasn't being used to extend an old connection, 

is there a means of manually deleting the Global Protect cookie on a client machine?

What is the meaning of GP app setting "Allow GlobalProtect UI to Persist for User Input"

What is the meaning of GP app setting "Allow GlobalProtect UI to Persist for User Input" , for what purpose this option we can use ?

Global Protect w Azure SAML/MFA won't trigger logon dialog box

On my Cisco ASA I have SAML configured and when I logon I get prompted with a browser dialog box for user name and password which then triggers an MFA token to my smart phone. But for Global Protect the client is going straight to Authentication Fail

Global Protect Logs Cookie Expired Before Expected

I am trying to understand how I could have two Global Protect cookie expiries within a half hour of successful certificate authentication. 

7:04 Certificate Auth Successful and IP assigned

4/12/2022 7:04 portal-auth login Certificate LAPTOP-ADHDS8HOL

Problems with Android through SAML in global protect

Hello,

When trying to log in through SAML in global protect, the password typing is very slow, taking about a minute to be able to type it. 

Affected devices:
- Samsung SM-T585/ Android 8.1.0
- Samsung SM-T595/ Android 10
Global protect version:
Global pro

GP - Split tunnel is working like full tunnel

Hello All!

I configured the GP to be a split tunnel. When I connect, I can access internal resources, but no Internet access. Normally, a default GW gets assigned of 0.0.0.0 on the PAN adapter I thought. There's no GW. External traffic is trying to r

Global Protect on MAC stuck at Portal Prelogin

Hi !

I am trying to connect to GlobalProtect via Mac - on Windows (same user) everything works fine. 
Pressing the Connect button on Mac shows the Azure Login + 2MFA appears as expected but as soon as I enter the Code
a blank screen appears and Logs are

How is it determined if a patch is "missing" or not?

Hypothetical scenario:  All Windows 10 clients connecting to Globalprotect.  All are managed by System Center Config Manager.

I have a HIP Object that matches if there are any patches missing with a severity of 1 or greater.

I have a HIP profile with t

Failures to connect with GlobalProtect 5.2.10 on Android 12 devices

user in S Africa - cannot reliably connect or even see corp UK gateway

1. user is on a Mac running GP 5.2.10-6

2. user is running macOS Big Sur v11.6.3

3. all her gateways worked correctly before she left London for S Africa

4. her home internet, as far as one can tell, seems to work correctly

5. if she tries her other gate