This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

In GlobalProtect Always-On method how to force users to Logoff after a certain time period?

With connection method set to User-Logon(Always On) how can we ensure users who connect to the portal get logged off or disconnected after a certain period(in our case after 12hrs). There is no particular way currently to do this until and unless you restart/shutdown PC(which is not great). However, we have a use case where we are using a privil...

GlobalProtect integrated login

Hello, We currently have GlobalProtect setup with always-on, with certificate logon and credentials (via RADIUS via AD). Right everything is working as designed. We have a desire to remove the manual login once globalprotect launches in the user session (so one logon; just Windows). How do we enable GlobalProtect to automatically logon while usi...

mrt3385 by • L0 Member
  • 1953 Views
  • 2 replies
  • 0 Likes

Launching Global Protect from Microsoft myapps portal

We currently have our palo firewalls tied to Azure SAML for our vpn users. These users multi factor authenticate through azure. When clicking global protect from the taskbar, it opens and users are able to connect. What I would like to do is point users to the myapps.microsoft.com portal, show the palo app, users click this app and it launches t...

Does a new Split Tunnel require client restart?

We are implementing a split tunnel to separate 365 traffic. Once we configure the Split Tunnel, will the user be required to restart either the client or the PC? before this becomes effective, or should this be an automatic process... If so... how long before it kicks in ?

dgray1 by • L0 Member
  • 2127 Views
  • 2 replies
  • 0 Likes

split tunneling

I am trying to get global protect gateways set up on two PA-850s. Cant seem to get split tunneling right. wondering if i need licensing. the description for licensing states that it is needed for split tunnleing by domain, but not for doing it by IP address, which is what i am doing. anyone know if i need the licensing?

SAML Authenticate Using Azure disable auto submit username and password

Successful deploy integration SAML authentication using azure but it will auto login with office 365 username and password. I had set tried set my default browser to Chrome, Chrome incognito mode, Edge, firefox, firefox in private but it still auto submit my username. How to I disable the auto submit username and password when GP redirect to htt...

VLim by • L2 Linker
  • 1368 Views
  • 0 replies
  • 0 Likes

Resolved! Palo Azure SAML issue

Our AD forest is yz.abc.com We have GP working with LDAP but user has to enter creds as yz\user For the SAML profile it only configured for test portal authentication separately, no agent configuration done yet. When I access portal in browser i get this error although SAML profile allows all users SAML SSO authentication failed for user \'use...

image.png
image.png
image.png
image.png
raji_toor by • L4 Transporter
  • 3947 Views
  • 1 replies
  • 0 Likes

GlobalProtect Authentication Override

Been using Radius auth to portal with auth override to gateway for years but seems to now be playing up... Gateway is requesting radius auth and ignoring override settings. This is the same issue on both Windoze and IOS. PA 3020 9.1.14 We have no custom checks, just Radius auth (which is working fine) Many thanks in advance...

Resolved! pre-logon - not seeing "pre-logon" user in traffic logs / 0 hits on pre-logon policy rules

I'm testing out pre-logon always on VPN with a pretty basic setup. My pre-logon tunnel is coming up and seems to work fine, however I am not seeing any hits on a permit any/any security policy rule that has the source users set to "pre-logon". Nothing in the traffic log either, just shows a blank user for traffic prior to successful user auth. U...

GlobalProtect Agent v6.0.0 showing strange Characters

Hi LIVECommunity, Has someone else seen this behavior on the GP Agent? All of a sudden it started showing strange characters. The agent is v6.0.0, installed on a Windows10 with the English language. By the way the agent works fine (I can connect to the VPN). We then updated to v6.0.3, but the issue remains Any suggestions would be...

GP.png
v6.0.3.png

Migrate GlobalProtect users from LDAP portal to SAML portal

Dear community, Pleae could someone help with my GlobalProtect transition from LDAP to SAML ? The SAML side of things has been setup and tested. I would now like to move from one portal and gateway (using LDAP auth) to new ones using SAML auth but I am struggling to see how to do this transparently for all our users with minimal disruption o...

Assigning a static IP to a Global Protect user

Is there a way to assign a static IP to a global protect user? I have a couple security policies that specify userids in the source, but the policies are not getting picked up. They are dropping to the default deny. I verified that the userid shown on the traffic monitor matches the rule, but it is not working. I was thinking that if I 'assi...

Global Protect HIP check severity numbers (Windows)

The Global Protect documentation for severity numbers is a little incomplete. I opened a TAC case and got the full breakdown and wanted to document it. Severity Value Rating-2 (PATCHMANAGEMENTAGENT_SEVERITY_NOTAVAILABLE) -> not available-1 (PATCHMANAGEMENTAGENT_SEVERITY_UNKNOWN) -> unkno...

staustin by • L2 Linker
  • 3053 Views
  • 1 replies
  • 2 Likes

Global protect client lauching several times in windows

Hi team, One of our clients are using global protect client. Recently they are facing a issue like the global protect client is launched several times in the system tray (right side bottom window ) . Help me on this with the valuable discusions.#global protect #paloaltoPlease note you are posting a public message where community members and expe...

KRanjith by • L0 Member
  • 1728 Views
  • 0 replies
  • 0 Likes
  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks