GlobalProtect Users Unable to Reach Intranet Resources Every Hour/2hrs

Hello, We have been experiencing an interesting issue where users that connect via GlobalProtect, will all of a sudden no longer be able to access internal resources after about an hour/2hrs of initially connecting. External resources work absolutely fine during this period. The only way to remedy this is to disconnect GP/refresh the connection....

Global Protect VPN Disconnects Local Network Resources After 4 Hours

Apologies if this is a simple fix / stupid question. We have a group of users who need to use the GP VPN to access certain online resources provided by another company. After about 4 hours with the VPN connected, we lose all access to local network resources i.e. network drives). Only shutting down the VPN will bring them back. Is there a ti...

Importing SSL

Hi, I'm new to importing SSL Wildcard Certificates. I'm trying to import a new ssl wildcard to replace the expired ssl wildcard cert. I was able to import new ssl wildcard cert but the firewall will not allow me to add the new ssl wildcard cert to SSL/TLS profile. The old ssl wildcard cert shows with a SSL/TLS profile.But not the new cert. Do ...

Are there any AUTH CERT vulnerabilities with the Global Protect Client version 5.2.11

How to configure G-Suite SAML authentication for Global Protect

I am trying to set up G-Suite SAML authentication for Global Protect. I followed the directions outlined here to the letter: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UIjCAM I get the following errors: On Google Chrome, I get this error 403. That’s an error. Error: app_not_configured_for_user In Firefox, I ge...

Windows11 fails to connect to Portal with client certificate authentication enabled

I finally got combined certificate and user/pass/MFA authorization for our always-on VPN clients to multiple firewalls (cert auth to the Portal for valid asset checks and auto-login to trigger internal host detection, user/pass/MFA auth to the Gateway for actually establishing the VPN). Moved ~225 Windows10 clients in 1 swoop with only 1 problem...

x-auth support

I am trying to enable x-auth support on my Global Protect Gateway I configured and under Agent>Tunnel Settings , I do not have the "enable x-auth" option, only "enable IPSEC" IS this a GP licensing issue? I read the doc for that and it doesnt mention x-auth as one of the advanced features. Thanks

GlobalProtect 6 Connection failed on macOS login, then auto-connects

Installing GP 6.0.1 on macOS Monterey 12.4. I can login and save my credentials, everything works. On restart, GP auto starts and tries to connect. It always shows 'Connection Failed', then 'Connecting', then 'Connected'. the whole process takes about 30 -60 seconds. screenshots attached. Just wondering if this is normal, or if theres a setti...

Global Protect Azure AD MFA

I've recently setup and succesfully tested a new portal and gateway with Azure AD MFA and the global protect app. Currently i can log into my iphone app and I receive the portal auth, (LDAP) and then get prompted for the Microsoft sign in followed by the MFA (SAML), in my case I'm utilizing the MS authenticator app. All is good with this setup ...

Clear Global Protect Cached credentials.

Hi, Is there a way to clear cached Global Protect credentials on a Windows 10 machine? The user has put in the wrong username and every time it goes to reconnect it reverts to the old credentials even though the new ones are successful. Client version is 5.2.11. Thanks

need to reconnect

hey all, i'm having an issue whereby when i'm connected to a hotspot the GP connects fine but when switching to a wireless network it fails. my workaround works as below everyday. please let me know which log file you need for this type of issue. 1.connect to hotspot 2.connect GP 3.connect wifi 4. disconnect hotspot my windows patches, carbo...