This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

VPN portal migration to Cloud

Hi Team We have a GP portal vpn.example.com which is hosted on a physical NGFW where we use SAML for authentication.Now we want to move it to cloud, hence we have to generate a new SAML for this portal IP with the FQDN vpn.example.com.We want to use the same FQDN for GP portal on cloud. I am not sure about the IDP (SAML) side configuration but ...

Resolved! AzureAD Group Mapping for GP

Hello, We're currently implementing GlobalProtect with SAML Authentification to AzureAD only (no hybrid) based on groups for easier management. Example :Groupe1 is given an IP_Pool1 IP with access to subnet1Groupe2 is given an IP_Pool2 IP with access to subnet 1 and 2 As of today, we didn't find any way to do it properly and from what we've seen...

GP_VPN Disconnection Issue

Hi All, We are having two ISP connections and configured an GP Portal/Gateway on each ISP connections(Primary Portal/GW on ISP 1 and Secondary GP Portal/GW on ISP 2). On firewall the ISP 1 is configured as default route and ISP 2 is configured as back-up default route and path monitoring configured on ISP 1. We could see in the system logs that...

Exclude Zoom from GlobalProtect

Hello, I'm working on excluding Zoom from GlobalProtect. I came across this articlehttps://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPDSCA4&lang=en_US%E2%80%A9 For windows, there is an error, instead of excluding %AppData%\Roaming\Zoom, you just need to use %AppData%\Zoom, as %AppData% already takes you into the roa...

Resolved! GlobalProtect Connection Issues after April 2021 Windows Updates

After installing the April 2021 windows updates our GlobalProtect clients started having issues connecting where it would take several attempts to get connected normally seeing 3-4 connect then disconnect cycles before finally staying connected. We confirmed that after uninstalling the windows update GlobalProtect behavior returned to normal, ho...

bcatlett by • L0 Member
  • 14190 Views
  • 2 replies
  • 2 Likes

Resolved! How to configure a global protect so that they user choose which VPN profile/group to connect?

As part of migrating from AnyConnect VPN to Global Protect remote access VPN: -Use Case:We are using Azure AD for authentication and the GlobalProtect authentication profile is configured to use Azure AD for SSO authentication;We want remote users to use GlobalProtect remote access VPN to access enterprise data center resources;A GlobalProtect P...

Dereje by • L1 Bithead
  • 7696 Views
  • 1 replies
  • 0 Likes

Resolved! Linux: Routing traffic through GlobalProtect

I am probably overlooking something basic here, so maybe this has a simple solution. I am trying to use GlobalProtect to access resources, I confirm that I am authenticated, and connected to the gateway. But It doesn't seem to be routing any traffic through the VPN. Kubuntu 20.04GlobalProtect 5.2.5-46 Any ideas?

GlobalProtect Linux Smart Card

There is a Smart Card solution that uses pkcs#11 and middlware that provides OS communication to the card. Is there a way to use this certificate from the card for GlobalProtect authentication?GP is looking for a cert in a specific location, but it is not possible to extract it from the Smart Card and import for GP (https://knowledgebase.paloalt...

nikoo by • L3 Networker
  • 5144 Views
  • 2 replies
  • 1 Likes

GlobalProtect using wrong user

Hello We are facing a strange issue on a small number of notebooks (Windows 10).When the user connects via VPN, the user seen (and used) in GlobalProtect does not match the logged in (Windows OS) user. If he clicks on "logout user", the wrong user will be used again (no popup window where the user is asked to enter a different user).All the "sti...

VPN Connection Failed

Good night dear.Anyone have the solution for the error below, please? After entering correct login and passwords, the GlobalProtect reports the following errors: "Connection FailedGateway: GW_EXT_DCSP_A3: The network conection is unreachable or the gateway is unresponsive. Check the network connection and reconnect." PS: I've formatted the not...

A.Bastos by • L0 Member
  • 3917 Views
  • 2 replies
  • 0 Likes

Resolved! Pinging Global Protect Clients

I am trying to troubleshoot a user who is claiming they are getting disconnected from GP VPNdue to issues seen at the application tier. I show them logged on since just before 7 and traffic logsappear to show continuous TCP traffic in the last five hours since log on. But I was thinking I'd puton a recursive ping to her laptop. But that traffic ...

MichaelMedwid_0-1630695801592.png

GlobalProtect - Autoblock/kick users when vulnerability exploit is detected?

I'm curious if anyone has crafted either a vulnerability profile or security policy that would disconnect or auto-block a user if their a vulnerability exploit is attempted while they are connected via Globalprotect. We've set up event logging that can flag and email my team whenever a user starts displaying malicious or compromised behavior whe...

Resolved! GP portal with multiple gateway can automate failover between multiple gateways when highest priority gateway gets down ?

whether GP portal (containing Multiple GP Gateways) can automate enforcement of GP Gateways in the event when primary GP Gateway gets down due to any undesired reason. If the failover between gateways is automatic; without users noticing that they have been disconnected and re-connected to the other gateway >

Global Protect in Thailand

Hello. I'm working from Ukraine from mcbook with Global Protect vpn which is used to access jira etc. I'm considering moving to Thailand for a few months.Can I be sure my vpn will still work properly from Thailand? What are the risks? Can Global protect be banned or restricted in Thailand? Do I need to make any additional arrangements or setting...

Elena89 by • L0 Member
  • 3131 Views
  • 2 replies
  • 0 Likes
  • 1683 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks