Hi, I'm having issues finding the GP CEF format to send logs to SIEM. It's not in the documentation. I belive the GP logs were being sent my SYSTEM prior to 9.1 and has changed to it's own log starting in 9.1
Our Palo alto will be depoloyed in cloud, We cannot login firewall without VPN, Now our Global certificate is expired so We cannot login palo alto so please suggest how to do
I've done two previous client updates through the firewalls that went fine. The first was 5.0.4 -> 5.1.5 with the portal set to allow user to update manually. Everything went fine. At the time, I think PAN-OS was 8.1.somethingThe second was 5.1.5 -> 5.2.6 with the portal set to allow transparently. Everything went fine. PAN-OS was 9.1...
Hello there,Yesterday our certificates used for GlobalProtect expired. I reneved them like last time and then - we lost possibility to connect to our institution from endpoints. Nothing more were changed. Error seen on endpoint: Now nobody can connect via GlobalProtect using AD credentials. Currently our settings in Agent config looks like: Wh...
This past week we have experienced this issue where users are unable to connect to GlobalProtect. This is happening at random and on multiple firewalls with version 9.1.11-h3, GlobalProtect client version is: 5.2.3 Looking at the logs this is what it shows under Monitor -> GlobalProtect Strangely enough, the certificate IS installed on the c...
Good morning,I need configure a secundary agent profile with other ip pool. I have just configured secondary agent profile in the Global Protect GW with a specific range and two specific users. When the user connects, it does not apply this new profile and continues to use the old one with old range. Could anybody help me with it? Regards Than...
Hi Guys, My customer has GSLB ( 1 domain 2 ip address).Example. nslookup vpn.test.com Name: vpn.test.comAddresses: 10.10.10.254 20.20.20.254 Is it possible to config GlobalProtect VPN with 2 ISP, 2 Portals, 2 Gateways but same certificate profile and same External Gateway name? But when client connect to each Gateway they will...
hi everybody, i've some questions regarding global protect client and mixed environment internal / external we have a internal campus networking infrastructure with lan and wlan (2 different subnets), so the laptop changes the ip-address if traveling around the campus, wired or unwired... so we have installed global protect client for internal u...
Just completed an install this last weekend and received a report that a user wasn't able to connect to GlobalProtect. I started with the normal troubleshooting and quickly realized this was going to be something more detailed. The user that initially complained said that she wasn't able to connect to GP. I asked them to just try to hit the port...
Hey, We have a GP configuration with 8 GP Gateways and 2 of them are acting as a GP Portal for backup.We are using SAML authentication with Azure and wanted to know how to you deploy GP with SAML authentication in large scale.Currently I have configured 3 SAML apps on Azure one for each PA device but I think it is not the right configuration sin...
We have one GlobalProtect Portal and 3 Gateways. This one Gateway is version 9.0.9-h1, and the GlobalProtect client version is 5.2.3-22. For testing, on this one Gateway, I enabled Split tunnel Domain and Application for *.webex.com and *.zoom.us. I'm testing from home with two laptops, and both are connected to this same GP Gateway. Laptop 1 do...
Hello Everyone, I have set up an internal host detection in my GP config but I am still getting notified for authentication and then the GP client connects while in the office. I can ping the internal host from the office and as well when I am connected to GP. Any ideas what might be going on? Thanks
Hi all as subject showing. that the global protect didn't auto connect it-self . we must click "click here", then, it will show connecting. pls check the screenshot from Edge. tested the same error from chrome. and IE.
If I upgrade our firewall from 9.0.11 to 9.1.12-h3 will it require clients to upgrade GP client if they are running 5.2.8-23?
I'm trying to connect a client computer to my corporate network via global protect, and once I'm connected, I need to print to that computer through the Linux service called CUPS. In order to print to this computer, I need to know what it's IP address is. So, once I connect the client computer to the internet, download global protect, and connec...
Raido_Rattameis
BPry
on:
Unable to sign in to GP - Mac OS 27.0.1
MP18
on:
GPVPN Issue
