This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Switch From Self-Signed Certificate to CA Signed on Globaprotect Fails

Hi,Our users were running for some time using a self-sgined certificate with few errors and issues.I was trying to install a wildcard certificate to replace the one in use, but no matter what I do, I ended up with the error message "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect. T...

Certificate issue

When try to VPN we get a can't verify server Identity. The CA Cert Expired, I try to renew it and still didn't work. Then I generated a new one Try use Global Protect as the issue like the old one. But wouldn't let me after installing the GW cert. Need Help fixing this any suggestions would be great need to get fix asap.

host reachability require in internal host detection

We have enabled internal host detection in GP portal with "enforce users to connect GP" option to yes. There is no internal portal and internal gateway configured.When user walk into office GP connecting as a internal.We have set our DNS server ip in internal host detection. I was thinking about failover perspective, what if this DNS server is d...

Deepak25_0-1641752471097.png
Deepak25 by • L3 Networker
  • 2189 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect Cookie Expired Log Messages But Not Using Cookie Auth

I'm using machine based certificate authentication for autovpn with Global Protect. It's mostly working with about500 connected. But I get some occasional complaints from busy end users who are hard to schedule for troubleshooting. So initially I am working on the back end. In logging I see fairly often "Cookie Expired" error. Yet I'm not using ...

palomed by • L3 Networker
  • 23320 Views
  • 3 replies
  • 0 Likes

user is getting an incorrect certificate when trying to login to GlobalProtect

I have a user with a Windows 10 laptop who is getting a certificate error when trying to login to globalprotect. No one else is having this problem. The message is "The certificate CN name mismatch. The certificate is not issued to <our FQDN for the VPN>"When they click the button to view the certificate, it is not even the certificate tha...

Unable to Establish Global Protect VPN "this certificate has expired or is not yet valid"

Hi Team, I am trying to configure Global Protect VPN but its not able to successfully established.when I tried to connect, the error showing "Connection failed - network connection is unreachable or the gateway is unresponsive"I checked troubleshooting logs and following error is observed "09/20/2021 17:25:14:081 [Error]: Gateway GlobalProtect-G...

RamaAdav by • L1 Bithead
  • 4131 Views
  • 1 replies
  • 0 Likes

Globalprotect SAML User Group Mapping

Hi !I am trying to get the User/Group mappings which are defined in Azure (Enterprise App - App Globalprotect) transfered via SAML to our Portal/Gateway.User-IP Binding works fine but I am missing the group associations.I'd appreciate any kind of help. brH

schimeha by • L0 Member
  • 3037 Views
  • 1 replies
  • 0 Likes

GlobalProtect keeps re-authenticating automatically

We need GlobalProtect setup with DUO via RADIUS and we need the user to have to manually re-auth after 11 hours. We have struggling to get this to work. Login Lifetime or Cookie Auth Expiration both automatically re-auth the user even when GlobalProtect is set to On-Demand and set to not remember username and password. (The biggest issue with th...

See the users version of Global Protect in Panorama

I am getting ready to test upgrading GlobalProtect using the "Allow Transparently" option of the upgrade for a small subset of users. I want to verify the upgrade worked from Panorama without reaching out to the user for verification that it worked. I can't seem to locate where I would see the user's client version for GP in Panorama. My initial...

Bo_Olsen by • L0 Member
  • 12414 Views
  • 3 replies
  • 0 Likes

Creating self signed Certificate for IOS device 14 and 15 on Palo Alto firewall

Hi Folks, Our GP VPN Portal and Gateway Certificate had expired recently. When we created an new self signed certificate on Palo Alto firewall and mapped it to GP VPN Portal and Gateway. We are able to connect to portal and Gateway and it is working fine for windows and Android device. But when we try to connect to GP Portal through IOS device ...

Resolved! Global Protect install error on Surface X with SQ2 processor

Trying to install Global Protect on a new Surface X Pro and run into the below error. "This installation package is not supported by this processor type. Contact your Product Vendor"Its a Surface Pro X with Windows 10 64Bit SQ2 processor. Tried installing GlobalProtect64-5.2.5-c84, 5.25, and 5.18 all give me the same error message.

GlobalProtect iOS Certificate issue

Hello, I’m in the middle of trying to make a gateway for iOS devices and I’m having an issue. I use MobileIron to push out the config and it uses an MI SCEP cert; I’ve added the MI SCEP CA to the PAN device and set it up as the auth profile. If I only do UN/PW I have no issue but as soon as I add cert requirement, the iPhone GP app has an erro...

COlson by • L2 Linker
  • 2809 Views
  • 1 replies
  • 0 Likes
  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks