GlobalProtect VPN vs Clientless VPN

Hello Bros,

                Currently, we are using GlobalProtect VPN, which is working great.

and now we are discussing of using the Clientless VPN supported by the PanOS version 10 and later.

Do you recommend using the Clientless VPN over Globalrotect

When attempting to log-in to GlobalProtect, a user will hit the enter key and the the username/password disappear. They have to physically click login

Hello,

As the title says: when attempting to log-in to GlobalProtect, a user will hit the enter key and the the username/password disappear. They have to physically click login and it'll work. We leverage DUO authentication as well but it only acts l

Run Diagnostic Tests for these Web Destinations

In watching the video below about global protect troubleshooting, them mentioned a feature "Run Diagnostics Tests for These Web Destinations". Is this test available whether or not you are using Prisma access and Data Lake? We're not using Prisma nor

Global Protect and PIV YubiKeys

OK, so I am not sure how many are using YubiKey as smart card as well as using Global Protect. I would be interested if you have seen any issues using the two together?

Failing to connect to portal for particular user on Windows after upgrade

Hi, I recently started having issues with my account connecting from Windows after an upgrade. The account logs in fine still from MacOS. I've tried multiple Windows machines and all exhibit the same behavior. Creating a new test account worked from

Can't access most of the websites after connecting to globalprotect VPN on Linux

Hi, 

I have installed GlobalProtect_UI_deb-5.2.4.0-14.deb using the command 'sudo dpkg -i GlobalProtect_UI_deb-5.2.4.0-14.deb' on my Ubuntu system. Then I am using 

$ globalprotect

$ launch-ui

connecting to the portal. 

But after connecting to the VPN I

Pre-Logon for Company Devices Only

Happy Saturday All!

Here is my scenario:

• We have employee and vendor GlobalProtect connections
• Employees need to Pre-Logon and Always on with a locked-down Client based on AD Group
• Vendors do not need to Pre-Logon and then can have an On-Demand connect

Authentication Cookies Generation and Authentication

I am trying to a set up an implementation of pre-logon, then SAML w/ Client Certificates.

Utilizing a machine certificate I can configure how I want with no issues, but using only a client (user) certificate, pre-logon doesn't work, which is expected

GP Debug Help

We've been having difficulty with a particular use trying to connect with cert based authentication. 
What's this telling me "failed to get portal config", "restrore last portal config from file" etc?
Is there a good resource on these debug message gen

Global Protect False Negative Status "Portal Failed"

User running Global Protect 5.2.5-66 on Win 10 on Surface Pro was getting message "Portal Invalid". But when our tech remoted into her machine, he was able to see she could reach all internal resources. Any thought as to why GP would show Portal Inva

GlobalProtect Portal authentication by certificate fails with "Valid client certificate is required"

I have been trying for some time to get a mutli-stage GP login working in an always-on VPN. Going from an existing user/pass login to both the Portal and Gateway (with third party MFA over radius, cookies to prevent dual auth request), to a certifica

Trying to set access rules for GlobalProtect VPN

We're looking to set up access rules/controls for our VPN, and I'm having some trouble figuring it out.

We already have our gateway and portal set up, and have it whitelisted to only allow specific users through. However, we want to set up a second p