This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

New GP Client Install

I am installing the GP client 5.2.11 on freshly imaged Windows 10 21h2 devices. Once the client is installed the users are not being logged in by SSO. In the logs it says that the SSO credential capture fails. It has worked previously with older GP clients and Windows versions so I cant figure out what has changed. Here is snippet of the GPS...

JMarberg by • L0 Member
  • 2965 Views
  • 2 replies
  • 0 Likes

Third party SSL cert for Global Protect

I have a third party (Network Soluitions SSL cert that expires in 2023 but validation not past July 22nd of 2022. What is the process from start to finish with the cert and on the firewall? I'm assuming I need to have NS reissue another cert with another request and then follow this article but just wanted to confirm these are the steps? http...

Resolved! SAML Azure Settings for Global Protect

Hi, Does anyone know if it is possible to use IP addresses for the Identifier (Entity ID),Reply URL (Assertion Consumer Service URL), and the Sign on URL instead of URLs for Global Protect using Azure for MFA? Thank You, Marc

Resolved! GlobalProtect problem on Mac when menu bar icon is hidden

I just upgraded from an older MacBook Pro to a newer one. The new MacBook has a smaller menu bar, due to a built-in camera that is housed in a "display notch", which hides part of the menu bar. See https://www.macrumors.com/how-to/hide-notch-macbook-pro/The menu bar displays fewer icons, so some icons are simply "hidden". For apps like GlobalPro...

Solving any script issues on GlobalProtect

Go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\SettingsChange the Reg_SZ “Defaul-Browser” including the value YES like in the picture below*You can also create a script using Reg Add to change the value to YES It is useful especially if your company uses MFA, you can face some issues like this one

andersonsds_0-1656175295801.png
andersonsds_1-1656175485964.png

GlobalProtect quarantine

I am in the process of setting up HIP objects and profiles with the end result being a quarantine for devices that do not match for AV software and definitions along with Windows patch levels. I want to be able to automatically quarantine a device to allow it internet only so the user can fix the issue. I then want the device to be allowed back ...

Resolved! GlobalProtect HIP issues

Hello, I am testing out using HIP match for certain traffic but I am running into an issue where traffic continues to be blocked. I can see the HIP information in the log and firewalls has GP Gateway license. Originally tried to use HIP for just Anti-Malware 'Is Installed' and has 'Real Time Protection' and the traffic never passed even thoug...

COlson by • L2 Linker
  • 4829 Views
  • 2 replies
  • 0 Likes

GlobalProtect upgrade through GPO

Hi team,Hope all is well. We have an issue with the GP client app upgrade through GPO when users are working remotely. Users who work in the corporate have no issue with the GP upgrade, however, it seems remote users do not have access to the shared folders as it seems the GP gets disconnected during the upgrade. I thought the whole .msi would b...

print_globalprotect_error.jpg

LSVPN with PA-450 Spokes 10.1 - active/active or active/passive?

Hello,new to PAN .. at the moment we have to do a concept for failover in branch offices, in the LSVPN context.We do have 2 LSVPN Hub Palo Alto FWs in Azure in active/active, where Azure Loadbalancer balances the traffic.Now the question is for "standard design" spoke / branch offices.When we do have 2 ISPs in the location, both ISP lines should...

global protect split dns

my global protect client is 5.2.0-81,my firewall is pa-5020,software version is 8.1.23.my global protect did the tunnel split,and dns split. in globla protect portal, Agent->APP, i configure Split-tunnel Option "Both network Traffic and DNS"，Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only) "NO"。tunnel splittine do...

linfei by • L0 Member
  • 2537 Views
  • 2 replies
  • 0 Likes

Resolved! Split tunnel specific URL only, not entire site?

Good day folks. I have a situation where I need to split-tunnel a specific URL from a company web site - but not the whole site if I can avoid it. For example https://www.mysite.com/admin - split tunneled to VPN clients. https://www.mysite.com - not split tunneled to VPN clients. The /admin/ URL is access list filtered - I have obviously been ab...

darren_g by • L4 Transporter
  • 2860 Views
  • 2 replies
  • 0 Likes

GlobalProtect appweb3 exhaust Mgmt CPU % due to large amount of users

GlobalProtect Hi Everyone, I experienced issue with GlobalProtect. At the start of the day, appweb3 will spike up abnormally to like 95%. From the traffic logs we noticed a lot different user trying to access GP. However the timing was exact the same for all the users and it stretches across many pages. From KB below I understand that the appw...

Wenwei_Y by • L0 Member
  • 2518 Views
  • 2 replies
  • 0 Likes

GlobalProtect stops responding

After upgrading from 9.1.13-h to 9.1.14 issue was noticed (not sure if it was present earlier) - in about a week/two GlobalProtect stops responding - even portal page is not opening from the browser, so also GP client connection fails. It is not getting to authentication or anything further. Portal IP is responding in general - pings are fine a...

nikoo by • L3 Networker
  • 2200 Views
  • 2 replies
  • 0 Likes

Resolved! Globalprotect 5.2.5 popup message

Hi All, Having just deployed version 5.2.5 when I connect on Globalprotect I get a pop up stating "The network connection is unreliable and GlobalProtect reconnected using an alternate method......". This did not appear before and was not present on 5.2.4. We need version 5.2.5 for O365 split tunneling, there is an issue using 5.2.3 and 5.2.4. I...

a.jones by • L3 Networker
  • 34904 Views
  • 20 replies
  • 2 Likes

Resolved! Global Protect service impact during failover in A/P configuration

Hello all, I hope you are doing well.As I mentioned in the subject, I just want to know when HA is configured, does it affect existing sessions if the existing active device is failover while the GP is connected? If there is an impact, users can experience service disruption? Please share some info about it. Thanks.GlobalProtect

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks