Comcast domain suffix getting appended into DNS requests over Global Protect

I ran a packet capture on PAN to try and figure out an intermittent problem with one of my GP 5.2.5.66 users (Windows, Surface Pro) where certain web based or internal applications will just start working. The external are Outlook O365, Teams for exa

Global Protect for Windows 11

Is Global Protect working normally on Windows 11?

Global Protect Client and Intune Security Baseline

Greetings PAN community.  Hoping to find someone that has seen this issue already so that I can move forward with my implementation of Intune Baselines. We use Configuration profiles at the moment to manage our fleet where we use the Global Protect c

Reconnecting Users who manually disconnect

Should a user manually disconnect from GP, is there a setting that would automatically reconnect them after a number of minutes/hours, and is this configurable ?

Softphone connect issue on GP agent 5.2.8 version when primary DNS is unreachable in GP setting

The endpoint having GP client version 5.2.8, is having an issue to connect to Secondary DNS Server for SIP traffic only. The issue is occurring on 5.2.8 when the primary DNS is not reachable.

• WFH users connected to VPN gateways, were having primary

Separation of profiles for authorization and authentication in GlobalProtect

Hello friends! Help me please.
I need advice on authentication and authorization when connecting to a GP.
Is it possible to separate these roles?

For example: authenticate using SAML.
And then check this user for belonging to groups in LDAP, and dependi

GlobalProtect Always-on User Experience

Hey all - We're currently in the beta-testing phase of our GlobalProtect implementation, and I have a couple of questions around 'best practices' to ensure a good user experience.  First, our setup:

- PAN-OS 10.1.5-h1

- GlobalProtect client v5.2.11-1

GlobalProtect License Portal or GP license Gateway?

Hi all, 

I need a clarify about GP Portal license and GP Gateway license. Which one is needed for clientless VPN?

I have this PA-850 and running on PanOS 9.0.13, on support portal it shown that I have GP Gateway license active but GP Portal license is

Strange DNS behavior - Mobile Users—GlobalProtect - Panorama Managed Prisma Access

Hi everyone,

I had a bit of a strange behavior regarding DNS for mobile users, and wanted to verify if this was working as intended.

IP addresses are made up

Info on the infrastructure:

- Panorama Managed Prisma Access.

- Mobile Users - GlobalP

Issues with Global Protect Client pulling focus from other windows

The problem description is similar to this site: https://www.reddit.com/r/paloaltonetworks/comments/qcu48n/issues_with_global_protect_client_pulling_focus/

Apples MAC, GP software version: 6.0.1；

When using Word to edit text, GP will take away th

Global protect SAML with azure need to make the joined PC to access without going to authentication other than to ask for username password via webpa

Global protect SAML with azure need to make the joined PC to access without going to authentication other than to ask for username password via webpage.

I done the SAML and enabled the Sigle sign on from agent tab to be ON so the global protect get

SAML Azure Global Protect Redirects

Hi,

We use RADIUS (DUO) for our Global Protect clients authentication but now I have configured SAML. I have also enabled MFA in Azure. Everything works properly as I am able to access all the company resources remotely via GP SAML authentication.

Global Protect 6.0.1 dropping network in Modern Standby (W10 21H2)

Any reason that GP 6.0.1 is dropping VPN connectivity in modern standby?  Windows 10 21H2.  I'll post logs shortly.