This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect "Connect Before Logon" not working with Duo SSO

We recently implemented Duo Multi-Factor Authentication (MFA) and have configured GlobalProtect to use Duo's SSO service (which in turn Duo uses Azure AD for authenticating the user). We are using SAML for authentication, so when the user clicks 'Connect', GlobalProtect does the portal connection first and is told by the Palo Alto to open it's...

jrauman by • L2 Linker
  • 5910 Views
  • 1 replies
  • 1 Likes

Windows 11 22H2 device guard Radius MS-CHAPv2

Hi, The newly released Windows client update 22H2 enables device guard by default which will block MS-CHAPv2 for radius authentication use. We currently use this for our GP configuration since radius auth supports users changing expired passwords via the GP client. I had a look at the other available radius options and it seems EAP-TTLS/PAP is...

02322099

Hi Team, We have a scheduled session with client at1.00 pm IST for the case 02322099. but end of the moment TAC engineer is informing us to reschedule the session. as this is a scheduled session we can't reschedule it kindly align another engineer to share session link with us.

Global Protect - Connect before logon Questions

Good Afternoon, I have two requirements that I am trying to meet with Global Protect: 1. Pre-logon for a new or existing remote user that has never logged onto a new pc. I set this up and it seems to be working fine and smoothly transitions the user over to the gateway after login no issues. The user is then able to connect and disconnect a...

Global protect client upgrade issue

When Global protect client upgraded from 5.2.10 to 5.2.12 for MacBook, global protect clients enter cycled installation. Automatically disconnect ssl vpn--->prompt to upgrade---》automatically exit global protect client--〉open global protect client---》prompt to upgrade...... The result is still old version. how to troubeshoot this case?

Global Protect Virtual Adapter not set up correctly due to a delay, then gateway unreachable

Hi everyone, Running into this issue, I saw solutions in past threads like this one.https://live.paloaltonetworks.com/t5/globalprotect-discussions/the-virtual-adapter-was-not-set-up-correctly-due-to-a-delay/td-p/382464This did not resolve the issue for me. I did disable the Pan GPS, WMI, Deleted Palo folder in the registry, Deleted the C:\Window...

Force GlobalProtect Portal refresh of connected clients?

Is there a way to force the refresh of the portal agent config on connected clients? We have multiple portals and multiple gateways for VPN load distribution and fail-over capabilities. When developing/testing changes to the GP VPN I will often take a gateway out of rotation by deleting it from the portal external gateway config. The following d...

GlobalProtect SAML Not working

Hi We have recently deployed SAML authentication on our existing GP environment and this is working fine on most devices. Currently we are in a migration phase, which means only that the gateway is using SAML and the portal is still using on prem AD credentials (not saml). A few users experience the following behaviour: when logging into their...

Gobalprotect error : Cannot decrypt cookie in MAC

    Hello guys,Customer is currently using the GlobalProtect authentication method linked to Okta SAML in the prism access. The authentication worked well until yesterday, but it does not work as shown in the attached screenshot from today. Strangely, these issues only happen to Mac users. Windows users are successfully authenticated and c...

스크린샷 2022-09-15 오후 2.33.29.png
스크린샷 2022-09-16 오전 9.40.04.png

GlobalProtect unable to connect. TLS issue

Hi all, I just wanted to share something with you all. We are rolling our GlobalProtect to all our users and we came across the following issue with some users. 1.Users can not connect via GlobalProtect or even connect to the web portal. 2. Users are able to connect to the web portal from Chrome and Edge but are not able to connect using IE. ...

potracl by • L0 Member
  • 2829 Views
  • 0 replies
  • 1 Likes

Message an error has occurred in the script on this page when trying to connect to GlobalProtect

Hello team When connecting to GlobalProtect VPN for Windows we detect this error "an error has occurred in the script on this page" We have tried to perform Clear your Internet cache. Open the Start menu and search for Control Panel. Open the Control Panel and select Internet Options. Under Browsing history, click Delete... Check all boxes ex...

BigPalo by • L4 Transporter
  • 9152 Views
  • 1 replies
  • 0 Likes
  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks