This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Double-hop VPN

Hi everyone,I'm using third party VPN (ExpressVPN) router at home.I have to use GlobalProtect to access my company network.but I can't access GlobalProtect with using ExpressVPN.Dose someone know how should I solve this problem?I will appriciate, If you give me advaices.Thank you.

GlobalProtect Internal Gateway and On-Demand

I'm trying to set up an Internal Gateway for GlobalProtect, and am finding that GP does not connect to the Internal Gateway if the Connect Method is set to "On-demand". It works just fine if I set it to "Always-on". Is this the way it's supposed to work or am I missing something?

jambulo by • L4 Transporter
  • 2654 Views
  • 1 replies
  • 0 Likes

DNS and global protect

I have a situation where global protect clients are dished out a DHCP address from the firewall but need an on-prem PTR created when they connect. does anyone have a good way to do this ?

C_Neal by • L0 Member
  • 3313 Views
  • 2 replies
  • 0 Likes

Resolved! hip collection components helps in

Hello Bro, I have many security rules that based on the hip profiles.recently, I found that I have few people that their windows host id has changed. but what's so wiered is that some of them has same machine id!!!! which cause accessing resources issues.even when i check the registery, i found they are same.have any of you met with ...

Valid web cert being flagged as invalid

Hi, has anyone ever run into an issue with a website's cert being flagged as invalid in the browser when connected to VPN? The website's cert is valid and everything works normally when not connected to VPN. Any input would be appreciated. Thanks

jaylloyd by • L0 Member
  • 2606 Views
  • 3 replies
  • 0 Likes

"Windows 10 S" won't open SAML window

We have some users on "Windows 10 S" the computers are not joined to the domain and they will not open the SAML window , it sits at the verifying your sign-in info message. The version of GP is 5.2.8-5 and it can only be downloaded through the MS store. Any help would be appreciated, the users fall back to a different vendors VPN since GP can't ...

Global Protect 6.0 and 6.0.1 do not install the PANGP virtual adapter on Win 8

I still have a few users with windows 8/8.1 and I am seeing an issue with their machines after activating the latest GP revisions on my firewalls. After a fair amount of troubleshooting, I found that the PANGP adapter wasn't installed. Users report that the following error comes up in their client: "Could not connect to the global protect serv...

Global Protect Internal Gateway/VPN

Can we have Global Protect Internal VPN working same as external, means on-demand and when we connect to internal gateway we should get an IP assigned from firewall. In that case we can restrict that IP pool in security policies to access critical IT Infrastructure, allowing management of IT Infrastructure only from that internal IP pool. I un...

Global Protect Disconnections

Hi everyone, hope someone can help me out with this. I'm looking into an issue whereby a user suffers frequent drops when connected to Global Protect. Apparently he sits next to the router and Internet is good. Today he reports drops at the following times: Log for 08:30 (only dropped for a few seconds)Log for 10:33 (dropped for 5 secs)Log for 1...

BChana by • L0 Member
  • 5076 Views
  • 1 replies
  • 1 Likes

Where is 5.2.13 for Windows?

I am still looking/waiting on 5.2.13 to address the most recent security vulnerabilities. A couple of weeks ago they updated the bulletin to indicate the issue was not present in 5.2.13, but there is no 5.2.13 that I can find on Palo's site or on the actual firewall's software page. Surprised to see that 6.0.1 was released this week to addres...

GP disconnects in a set up with two ISPs when the primary link is down and users try to connect using the secondary link

Good morning,in production we have a pair of PA-440 in HA (10.1.5). The firewalls have been configured with double VR as described in this article:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFiCAKThe firewalls are connected to two Internet links with two different Providers.We have therefore configured two Portals...

Portals and Gateways General Question

I have two separate portal/gateways on two separate PANs. Call them gp1.acme.com and gp2.acme.com. If I wanted to make the gateway on gp2 be primary for laptops hitting gp1.acme.com portal - what happens at the network level? I presume I add a second gateway to portal gp1.acme.com. When the GP client reaches gp1.acme.com does it inform that clie...

palomed by • L3 Networker
  • 2496 Views
  • 1 replies
  • 0 Likes

Globalprotect verison 5.2.8 doesnt upgrade on some of the users

Hi Team, We have currently updated GlobalProtect to 5.2.11 from 5.2.10. While running report we came to know that some users are still on 5.2.8 and client is not getting updated on those devices. Can you please suggest if there an issue with version 5.2.8? Currently we are planning to push 5.2.11 version on those machines via software center but...

What am I doing wrong with Global Protect updates?

I am currently running GP 5.2.7 on a PA-3220 on 9.1.12-h3 and 99% of the time it is fine. I have an issue with a few of my developers with SQL Server Management Studio dropping connection.....but only SSMS. Was going to try newer versions of 5.2.x and see if that helps them out - just installing manually opposed to pushing through the firewall. ...

1.png
2.png
3.png
4.png

GlobalProtect Pre-logon tunnel rename doesn't work as expected

Hi Guys, We are currently running PanOS8.1.1 have some issues with global protect pre-logon. I have configured pre-logon as per below article.https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-Pre-logon/ta-p/136131 Problem we have is pre logon works as expected, however when user logged in to the c...

Namalw by • L1 Bithead
  • 16066 Views
  • 8 replies
  • 1 Likes
  • 1710 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks