Server Certificate Error

I was able to connect a few weeks prior to this error by uninstalling and reinstalling the GlobalProtect client.  However this is no longer working.

I'm getting the Server Certificate Error popup:

I checked Device/Certificate Management/Certific

unable to install code42 agent when GP is turned on

With GlobalProtect running but not connected the installs are working as expected.

Once we are connected to the VPN, getting the following error:

Request to activate com.code42.agent.extension failed.

The operation couldn’t be completed. (OSSystemE

SAML failed login attempt error mesage

We have SAML setup for GP where we check if user is member of the allow list in the auth profile. 

We have some illegal attempts which show up in system log with only 2 entries, 'saml-client-redirect' and 'auth-fail' with error message 

"failed authe

GlobalProtect client cant access internal resources

PAN OS 8.1.22 / GlobalProtect Agent 6.0.3

(1) GlobalProtect has no issue connecting to portal/gateway (Dell Latitude, Windows 11)

(2) Gateway Access Route (split tunnel)(No direct access to local network is UNTICK) has access to 0.0.0.0/0

(3) VPN u

Comcast domain suffix getting appended into DNS requests over Global Protect

I ran a packet capture on PAN to try and figure out an intermittent problem with one of my GP 5.2.5.66 users (Windows, Surface Pro) where certain web based or internal applications will just start working. The external are Outlook O365, Teams for exa

Global Protect for Windows 11

Is Global Protect working normally on Windows 11?

Global Protect Client and Intune Security Baseline

Greetings PAN community.  Hoping to find someone that has seen this issue already so that I can move forward with my implementation of Intune Baselines. We use Configuration profiles at the moment to manage our fleet where we use the Global Protect c

Reconnecting Users who manually disconnect

Should a user manually disconnect from GP, is there a setting that would automatically reconnect them after a number of minutes/hours, and is this configurable ?

Softphone connect issue on GP agent 5.2.8 version when primary DNS is unreachable in GP setting

The endpoint having GP client version 5.2.8, is having an issue to connect to Secondary DNS Server for SIP traffic only. The issue is occurring on 5.2.8 when the primary DNS is not reachable.

• WFH users connected to VPN gateways, were having primary

Separation of profiles for authorization and authentication in GlobalProtect

Hello friends! Help me please.
I need advice on authentication and authorization when connecting to a GP.
Is it possible to separate these roles?

For example: authenticate using SAML.
And then check this user for belonging to groups in LDAP, and dependi

GlobalProtect Always-on User Experience

Hey all - We're currently in the beta-testing phase of our GlobalProtect implementation, and I have a couple of questions around 'best practices' to ensure a good user experience.  First, our setup:

- PAN-OS 10.1.5-h1

- GlobalProtect client v5.2.11-1

GlobalProtect License Portal or GP license Gateway?

Hi all, 

I need a clarify about GP Portal license and GP Gateway license. Which one is needed for clientless VPN?

I have this PA-850 and running on PanOS 9.0.13, on support portal it shown that I have GP Gateway license active but GP Portal license is

Strange DNS behavior - Mobile Users—GlobalProtect - Panorama Managed Prisma Access

Hi everyone,

I had a bit of a strange behavior regarding DNS for mobile users, and wanted to verify if this was working as intended.

IP addresses are made up

Info on the infrastructure:

- Panorama Managed Prisma Access.

- Mobile Users - GlobalP

Issues with Global Protect Client pulling focus from other windows

The problem description is similar to this site: https://www.reddit.com/r/paloaltonetworks/comments/qcu48n/issues_with_global_protect_client_pulling_focus/

Apples MAC, GP software version: 6.0.1；

When using Word to edit text, GP will take away th