This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect iOS Certificate issue

Hello, I’m in the middle of trying to make a gateway for iOS devices and I’m having an issue. I use MobileIron to push out the config and it uses an MI SCEP cert; I’ve added the MI SCEP CA to the PAN device and set it up as the auth profile. If I only do UN/PW I have no issue but as soon as I add cert requirement, the iPhone GP app has an erro...

COlson by • L2 Linker
  • 2877 Views
  • 1 replies
  • 0 Likes

Issues using Elliptic Curve DSA certificates with GlobalProtect agent

Anyone else come across this? Anyone using ECDSA certs for their GlobalProtect Portal or Gateways? Have you tried non-Windows/MacOS clients? Configuring GlobalProtect Gateways to use ECDSA certs instead of RSA certs breaks everything except Windows, MacOS, and mobile agents. As the SSL cert industry seems to be heading toward deprecating RSA c...

fjwcash by • L4 Transporter
  • 7225 Views
  • 4 replies
  • 0 Likes

GP Issue Gateway Fake

Hi, I am facing the issue with Pan GP where I get an error Gateway Fake: Could not connect to the GlobalProtect gateway. Please contact your IT administrator.I tried to remove the certificate and also reinstall it multiple times and delete the Palo alto network file also and re-install the Pan GP but no luck. Uninstall all applications but no so...

chanderjain_0-1638027354282.png

Does enforce users to connect GP option works with internal host detection?

We want to enforce users to connect GP when they are outside of the network. But when they use their same machine in internet network, this option should get disabled.Can I solve this problem using internal host detection (internal GP gateway) ? If yes , there should not be ip-user-mapping by GP in internal network .

Deepak25 by • L3 Networker
  • 2265 Views
  • 1 replies
  • 0 Likes

Connecting via a RDP connection drops RDP and VPN connection

We have a server that runs some automated processes. These processes requires that Global Protect be connected. When I RDP into the server and then connect the VPN on the server, the RDP session is temporarily disconnected. When it reconnects the VPN is no longer connected. I can't seem to keep both connections at once.

JAMF Upgrade broke HIP report

Greeting All.JAMF Cloud did an upgrade this morning. This update caused the jamf client binary to be updated on my computers.After the jamf client upgrade GlobalProtect no longer shows JAMF (Casper) in the hip report.Tested GP version 5.2.5 & 6.Has anyone else experienced this issue?

JasonBTR by • L1 Bithead
  • 5492 Views
  • 5 replies
  • 0 Likes

Resolved! Strange issue with GlobalProtect Wi-fi vs Ethernet

Hi Everyone, I need your help as I'm facing a very strange issue with GlobalProtect, the VPN used in my company.When I'm working from home I switch on my PC which is already connected to an ethernet cable: GlobalProtect connects almost immediately (usually to Europe Primary) and I'm able to access my company network drives, folders and remote de...

Capture_VPN_Ethernet.PNG
Capture_VPN_WiFi.PNG
Capture_VPN_WiFi_then_Ethernet.PNG

Public PKI CA with SCEP support

I want to set up SCEP enrollment on the firewalls so I don't have to manually update each device cert every year. Ideally I don't want to run my own Certificate management server internally. Can anyone recommend a PKI CA that supports SCEP directly for managing and issuing certificates, I have had a good look round, and I seem to keep being st...

Rich.H by • L2 Linker
  • 4800 Views
  • 3 replies
  • 1 Likes

Global Protect Upgrade queries

Hi,We are currently going through an upgrade procedure to upgrade the 5.2.4 GP clients to 5.2.8. The portal agent config "Allow user to upgrade GlobalProtect App" is set to 'Allow with prompt'. I am moreorless there just have a few Q's about expected behaviour as I have not done this before?When I activate 5.2.8 in Panorama will it prompt me to ...

pnorman by • L0 Member
  • 2470 Views
  • 1 replies
  • 0 Likes

PA-460 GP clientless VPN only allowing max users of 20

Hi, PA-460 with PAN OS 10.1.1, only allows me to enter a max user value of 20 in the GP clientless VPN config. Palo Alto documentation says it supports 200. Is there anyway to change this or is this a bug? https://www.paloaltonetworks.com/products/product-comparison?chosen=pa-450,pa-460 https://knowledgebase.paloaltonetworks.com/KCSArticleDetail...

BenPrice_0-1637901452039.png
Ben-Price by • L4 Transporter
  • 4009 Views
  • 1 replies
  • 0 Likes
  • 1706 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks