GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Resolved! GP Client not updating transparently on Win10 machines (5.2.6 -> 5.2.8)

I've done two previous client updates through the firewalls that went fine. The first was 5.0.4 -> 5.1.5 with the portal set to allow user to update manually. Everything went fine. At the time, I think PAN-OS was 8.1.somethingThe second was 5.1.5 -> 5.2.6 with the portal set to allow transparently. Everything went fine. PAN-OS was 9.1...

Problem with GlobalProtect after certificate renew

Hello there,Yesterday our certificates used for GlobalProtect expired. I reneved them like last time and then - we lost possibility to connect to our institution from endpoints. Nothing more were changed. Error seen on endpoint: Now nobody can connect via GlobalProtect using AD credentials. Currently our settings in Agent config looks like: Wh...

1.jpg
3.png
2.jpg
Damiano by L0 Member
  • 3147 Views
  • 1 replies
  • 0 Likes

GlobalProtect - Client cert not present

This past week we have experienced this issue where users are unable to connect to GlobalProtect. This is happening at random and on multiple firewalls with version 9.1.11-h3, GlobalProtect client version is: 5.2.3 Looking at the logs this is what it shows under Monitor -> GlobalProtect Strangely enough, the certificate IS installed on the c...

bernardohernandez_0-1643416673233.png

Configurate secundary agent profile with other ip pool

Good morning,I need configure a secundary agent profile with other ip pool. I have just configured secondary agent profile in the Global Protect GW with a specific range and two specific users. When the user connects, it does not apply this new profile and continues to use the old one with old range. Could anybody help me with it? Regards Than...

Alpalo_1-1646903258998.png
Alpalo by L4 Transporter
  • 2752 Views
  • 4 replies
  • 0 Likes

Global Protect VPN with 2 ISP (Active Active)

Hi Guys, My customer has GSLB ( 1 domain 2 ip address).Example. nslookup vpn.test.com Name: vpn.test.comAddresses: 10.10.10.254 20.20.20.254 Is it possible to config GlobalProtect VPN with 2 ISP, 2 Portals, 2 Gateways but same certificate profile and same External Gateway name? But when client connect to each Gateway they will...

gpvpn.png
Ustapon by L1 Bithead
  • 6191 Views
  • 7 replies
  • 0 Likes

Resolved! Global Protect mixed internal and external gateway

hi everybody, i've some questions regarding global protect client and mixed environment internal / external we have a internal campus networking infrastructure with lan and wlan (2 different subnets), so the laptop changes the ip-address if traveling around the campus, wired or unwired... so we have installed global protect client for internal u...

Odd GlobalProtect issue

Just completed an install this last weekend and received a report that a user wasn't able to connect to GlobalProtect. I started with the normal troubleshooting and quickly realized this was going to be something more detailed. The user that initially complained said that she wasn't able to connect to GP. I asked them to just try to hit the port...

Azure SAML Authentication with multiple PAs

Hey, We have a GP configuration with 8 GP Gateways and 2 of them are acting as a GP Portal for backup.We are using SAML authentication with Azure and wanted to know how to you deploy GP with SAML authentication in large scale.Currently I have configured 3 SAML apps on Azure one for each PA device but I think it is not the right configuration sin...

screenshot.png
minow by L4 Transporter
  • 13628 Views
  • 10 replies
  • 0 Likes

Split Tunnel Domain & Application Cisco Umbrella Issue

We have one GlobalProtect Portal and 3 Gateways. This one Gateway is version 9.0.9-h1, and the GlobalProtect client version is 5.2.3-22. For testing, on this one Gateway, I enabled Split tunnel Domain and Application for *.webex.com and *.zoom.us. I'm testing from home with two laptops, and both are connected to this same GP Gateway. Laptop 1 do...

Assigning the same IP to a GP client based on it's MAC address

I'm trying to connect a client computer to my corporate network via global protect, and once I'm connected, I need to print to that computer through the Linux service called CUPS. In order to print to this computer, I need to know what it's IP address is. So, once I connect the client computer to the internet, download global protect, and connec...

Jamescy by L0 Member
  • 4083 Views
  • 2 replies
  • 0 Likes

Not using AppID but GP connections are denying on apps for 10 minutes before allowing traffic to work properly

We are currently working on trying to get PA-3220s working properly and Global protect working but are running into an issue. Once a user connects, recently its starting to deny based on app ID, however in our VPN policy we have any specified. The thing is this is pretty random. In 5 to 10 minutes the VPN starts working normally and those deni...

palo-drops.jpg
palo-vpn-rules.jpg
palo-allows.jpg
ksauer507 by L3 Networker
  • 4806 Views
  • 4 replies
  • 0 Likes
  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
Labels