This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Global Protect SAML Okta groups integration

I'm currently working on setting up our 2 PAs for VPN. I'm trying to get the configuration set up to do something similar to what we had on Cisco but with PA and SAML instead of LDAP. I've followed this doc https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-GlobalProtect.html but in section 8 it doesn't exac...

sirons by • L1 Bithead
  • 4120 Views
  • 1 replies
  • 0 Likes

GlobalProtect 6 Connection failed on macOS login, then auto-connects

Installing GP 6.0.1 on macOS Monterey 12.4. I can login and save my credentials, everything works. On restart, GP auto starts and tries to connect. It always shows 'Connection Failed', then 'Connecting', then 'Connected'. the whole process takes about 30 -60 seconds. screenshots attached. Just wondering if this is normal, or if theres a setti...

Global Protect Azure AD MFA

I've recently setup and succesfully tested a new portal and gateway with Azure AD MFA and the global protect app. Currently i can log into my iphone app and I receive the portal auth, (LDAP) and then get prompted for the Microsoft sign in followed by the MFA (SAML), in my case I'm utilizing the MS authenticator app. All is good with this setup ...

danoman2 by • L3 Networker
  • 2500 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect users not able to use internet when they move to office from Home

Hi All, We had configured an GP Portal/Gateway on the firewall. The login method configured on GP is Pre-Logon method and we also had enabled "No Direct Access to local network". The Authentication method used is LDAP. Gateway is configured in Full tunnel mode As the user were working from home previously they will be able to access internet onl...

Resolved! Global Protect Transparent Update

Hi All, I've been testing a transparent upgrade from 5.1.8 to 5.2.9. (only handful of clients) We're a windows 10 site, 1909 + So far so good however I have come across a client that refuses to update. the device prompted the update and informed the user of the process, client restarted and reconnected but stayed on 5.1.8. Looking at the PanGPS ...

Clear Global Protect Cached credentials.

Hi, Is there a way to clear cached Global Protect credentials on a Windows 10 machine? The user has put in the wrong username and every time it goes to reconnect it reverts to the old credentials even though the new ones are successful. Client version is 5.2.11. Thanks

need to reconnect

hey all, i'm having an issue whereby when i'm connected to a hotspot the GP connects fine but when switching to a wireless network it fails. my workaround works as below everyday. please let me know which log file you need for this type of issue. 1.connect to hotspot 2.connect GP 3.connect wifi 4. disconnect hotspot my windows patches, carbo...

eugenes by • L0 Member
  • 2252 Views
  • 2 replies
  • 0 Likes

New GP Client Install

I am installing the GP client 5.2.11 on freshly imaged Windows 10 21h2 devices. Once the client is installed the users are not being logged in by SSO. In the logs it says that the SSO credential capture fails. It has worked previously with older GP clients and Windows versions so I cant figure out what has changed. Here is snippet of the GPS...

JMarberg by • L0 Member
  • 3005 Views
  • 2 replies
  • 0 Likes

Third party SSL cert for Global Protect

I have a third party (Network Soluitions SSL cert that expires in 2023 but validation not past July 22nd of 2022. What is the process from start to finish with the cert and on the firewall? I'm assuming I need to have NS reissue another cert with another request and then follow this article but just wanted to confirm these are the steps? http...

Resolved! SAML Azure Settings for Global Protect

Hi, Does anyone know if it is possible to use IP addresses for the Identifier (Entity ID),Reply URL (Assertion Consumer Service URL), and the Sign on URL instead of URLs for Global Protect using Azure for MFA? Thank You, Marc

Resolved! GlobalProtect problem on Mac when menu bar icon is hidden

I just upgraded from an older MacBook Pro to a newer one. The new MacBook has a smaller menu bar, due to a built-in camera that is housed in a "display notch", which hides part of the menu bar. See https://www.macrumors.com/how-to/hide-notch-macbook-pro/The menu bar displays fewer icons, so some icons are simply "hidden". For apps like GlobalPro...

Solving any script issues on GlobalProtect

Go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\SettingsChange the Reg_SZ “Defaul-Browser” including the value YES like in the picture below*You can also create a script using Reg Add to change the value to YES It is useful especially if your company uses MFA, you can face some issues like this one

andersonsds_0-1656175295801.png
andersonsds_1-1656175485964.png

GlobalProtect quarantine

I am in the process of setting up HIP objects and profiles with the end result being a quarantine for devices that do not match for AV software and definitions along with Windows patch levels. I want to be able to automatically quarantine a device to allow it internet only so the user can fix the issue. I then want the device to be allowed back ...

Resolved! GlobalProtect HIP issues

Hello, I am testing out using HIP match for certain traffic but I am running into an issue where traffic continues to be blocked. I can see the HIP information in the log and firewalls has GP Gateway license. Originally tried to use HIP for just Anti-Malware 'Is Installed' and has 'Real Time Protection' and the traffic never passed even thoug...

COlson by • L2 Linker
  • 4951 Views
  • 2 replies
  • 0 Likes

GlobalProtect upgrade through GPO

Hi team,Hope all is well. We have an issue with the GP client app upgrade through GPO when users are working remotely. Users who work in the corporate have no issue with the GP upgrade, however, it seems remote users do not have access to the shared folders as it seems the GP gets disconnected during the upgrade. I thought the whole .msi would b...

print_globalprotect_error.jpg
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks