This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect Authentication Override

Been using Radius auth to portal with auth override to gateway for years but seems to now be playing up... Gateway is requesting radius auth and ignoring override settings. This is the same issue on both Windoze and IOS. PA 3020 9.1.14 We have no custom checks, just Radius auth (which is working fine) Many thanks in advance...

Resolved! pre-logon - not seeing "pre-logon" user in traffic logs / 0 hits on pre-logon policy rules

I'm testing out pre-logon always on VPN with a pretty basic setup. My pre-logon tunnel is coming up and seems to work fine, however I am not seeing any hits on a permit any/any security policy rule that has the source users set to "pre-logon". Nothing in the traffic log either, just shows a blank user for traffic prior to successful user auth. U...

GlobalProtect Agent v6.0.0 showing strange Characters

Hi LIVECommunity, Has someone else seen this behavior on the GP Agent? All of a sudden it started showing strange characters. The agent is v6.0.0, installed on a Windows10 with the English language. By the way the agent works fine (I can connect to the VPN). We then updated to v6.0.3, but the issue remains Any suggestions would be...

GP.png
v6.0.3.png

Migrate GlobalProtect users from LDAP portal to SAML portal

Dear community, Pleae could someone help with my GlobalProtect transition from LDAP to SAML ? The SAML side of things has been setup and tested. I would now like to move from one portal and gateway (using LDAP auth) to new ones using SAML auth but I am struggling to see how to do this transparently for all our users with minimal disruption o...

Assigning a static IP to a Global Protect user

Is there a way to assign a static IP to a global protect user? I have a couple security policies that specify userids in the source, but the policies are not getting picked up. They are dropping to the default deny. I verified that the userid shown on the traffic monitor matches the rule, but it is not working. I was thinking that if I 'assi...

Global Protect HIP check severity numbers (Windows)

The Global Protect documentation for severity numbers is a little incomplete. I opened a TAC case and got the full breakdown and wanted to document it. Severity Value Rating-2 (PATCHMANAGEMENTAGENT_SEVERITY_NOTAVAILABLE) -> not available-1 (PATCHMANAGEMENTAGENT_SEVERITY_UNKNOWN) -> unkno...

staustin by • L2 Linker
  • 3084 Views
  • 1 replies
  • 2 Likes

Global protect client lauching several times in windows

Hi team, One of our clients are using global protect client. Recently they are facing a issue like the global protect client is launched several times in the system tray (right side bottom window ) . Help me on this with the valuable discusions.#global protect #paloaltoPlease note you are posting a public message where community members and expe...

KRanjith by • L0 Member
  • 1765 Views
  • 0 replies
  • 0 Likes

GlobalProtect "Connect Before Logon" not working with Duo SSO

We recently implemented Duo Multi-Factor Authentication (MFA) and have configured GlobalProtect to use Duo's SSO service (which in turn Duo uses Azure AD for authenticating the user). We are using SAML for authentication, so when the user clicks 'Connect', GlobalProtect does the portal connection first and is told by the Palo Alto to open it's...

jrauman by • L2 Linker
  • 5977 Views
  • 1 replies
  • 1 Likes

Windows 11 22H2 device guard Radius MS-CHAPv2

Hi, The newly released Windows client update 22H2 enables device guard by default which will block MS-CHAPv2 for radius authentication use. We currently use this for our GP configuration since radius auth supports users changing expired passwords via the GP client. I had a look at the other available radius options and it seems EAP-TTLS/PAP is...

02322099

Hi Team, We have a scheduled session with client at1.00 pm IST for the case 02322099. but end of the moment TAC engineer is informing us to reschedule the session. as this is a scheduled session we can't reschedule it kindly align another engineer to share session link with us.

Global Protect - Connect before logon Questions

Good Afternoon, I have two requirements that I am trying to meet with Global Protect: 1. Pre-logon for a new or existing remote user that has never logged onto a new pc. I set this up and it seems to be working fine and smoothly transitions the user over to the gateway after login no issues. The user is then able to connect and disconnect a...

Global protect client upgrade issue

When Global protect client upgraded from 5.2.10 to 5.2.12 for MacBook, global protect clients enter cycled installation. Automatically disconnect ssl vpn--->prompt to upgrade---》automatically exit global protect client--〉open global protect client---》prompt to upgrade...... The result is still old version. how to troubeshoot this case?

Global Protect Virtual Adapter not set up correctly due to a delay, then gateway unreachable

Hi everyone, Running into this issue, I saw solutions in past threads like this one.https://live.paloaltonetworks.com/t5/globalprotect-discussions/the-virtual-adapter-was-not-set-up-correctly-due-to-a-delay/td-p/382464This did not resolve the issue for me. I did disable the Pan GPS, WMI, Deleted Palo folder in the registry, Deleted the C:\Window...

  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks