GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

GlobalProtect Linux Smart Card

There is a Smart Card solution that uses pkcs#11 and middlware that provides OS communication to the card. Is there a way to use this certificate from the card for GlobalProtect authentication?GP is looking for a cert in a specific location, but it is not possible to extract it from the Smart Card and import for GP (https://knowledgebase.paloalt...

nikoo by L3 Networker
  • 5092 Views
  • 2 replies
  • 1 Likes

GlobalProtect using wrong user

Hello We are facing a strange issue on a small number of notebooks (Windows 10).When the user connects via VPN, the user seen (and used) in GlobalProtect does not match the logged in (Windows OS) user. If he clicks on "logout user", the wrong user will be used again (no popup window where the user is asked to enter a different user).All the "sti...

VPN Connection Failed

Good night dear.Anyone have the solution for the error below, please? After entering correct login and passwords, the GlobalProtect reports the following errors: "Connection FailedGateway: GW_EXT_DCSP_A3: The network conection is unreachable or the gateway is unresponsive. Check the network connection and reconnect." PS: I've formatted the not...

A.Bastos by L0 Member
  • 3889 Views
  • 2 replies
  • 0 Likes

Resolved! Pinging Global Protect Clients

I am trying to troubleshoot a user who is claiming they are getting disconnected from GP VPNdue to issues seen at the application tier. I show them logged on since just before 7 and traffic logsappear to show continuous TCP traffic in the last five hours since log on. But I was thinking I'd puton a recursive ping to her laptop. But that traffic ...

MichaelMedwid_0-1630695801592.png

GlobalProtect - Autoblock/kick users when vulnerability exploit is detected?

I'm curious if anyone has crafted either a vulnerability profile or security policy that would disconnect or auto-block a user if their a vulnerability exploit is attempted while they are connected via Globalprotect. We've set up event logging that can flag and email my team whenever a user starts displaying malicious or compromised behavior whe...

Resolved! GP portal with multiple gateway can automate failover between multiple gateways when highest priority gateway gets down ?

whether GP portal (containing Multiple GP Gateways) can automate enforcement of GP Gateways in the event when primary GP Gateway gets down due to any undesired reason. If the failover between gateways is automatic; without users noticing that they have been disconnected and re-connected to the other gateway >

Global Protect in Thailand

Hello. I'm working from Ukraine from mcbook with Global Protect vpn which is used to access jira etc. I'm considering moving to Thailand for a few months.Can I be sure my vpn will still work properly from Thailand? What are the risks? Can Global protect be banned or restricted in Thailand? Do I need to make any additional arrangements or setting...

Elena89 by L0 Member
  • 3113 Views
  • 2 replies
  • 0 Likes

Implications of "No direct Access to Local Network" toggle in Global protect client settings?

Hey folks. I, like probably a lot of us these days, use Global protect for the major percentage of the company's workforce. I run split tunneling - internal resources go over the tunnel, anything else just uses the local internet. Recently, I have had the need thrown at me the requirement to provide split tunneling for a set of addresses which a...

darren_g by L4 Transporter
  • 6151 Views
  • 4 replies
  • 0 Likes

Configure GlobalProtect VPN Client only for certain domains

Hello there,My name is Federico Iglesias, I have started working for a company that uses GlobalProtect as a VPN client.Sometimes I am having serious problems with the connection speed when the VPN is active.I need to be able to use the VPN for the corporate domains and for the rest of the outgoing connections use my local connection.I have been ...

Global protect gateway error - Invalid cert

The global protect was able to connect to all of the gateways. Since last week the global protect is showing error "The server certificate is invalid. Please contact your IT administrator"However, when i'm switching to a different ISP provider i'm able to connect to the same gateways. Global protect - 5.2.6PAN-OS - 9.1.8

BipinK by L0 Member
  • 5689 Views
  • 2 replies
  • 0 Likes

Resolved! DHCP address assignment for Global Protect VPN

All, I am working on a PA-220 LAB, in preparation for a PA 820 rollout. I have setup and configured my Global protect VPN. When it comes to DHCP, I know I can't use my DHCP servers but have to rely on DHCP from the firewall. That is OK. My question is this: For my VPN users, If I create a DHCP scope in Network>GatewayS>MyGateway>Agent&g...

RussMc by L1 Bithead
  • 16144 Views
  • 12 replies
  • 0 Likes

Globalprotect: Multiple gateway on the same firewall

Hello good people. We are planning globalprotect redundancy on our PA-3050 with multiple ISP. Here is our scenario: 1 Portal1 Gateway What we wanna do: 1 Portal 2 Gateway our existing gateway is going through tunnel mode via tunnel.1what I want to know is that, can I run my second gateway via the same tunnel tunnel.1? or Do i need to create a n...

Resolved! Is it possible to share which Globalprotect VPN address was assigned to which user/real client ip address to other systems?

Hello to All, I am interested if Palo Alto is used as the Globalprotect VPN solution but after it there are other systems that may benefit from user group policies, howcan this be done? The issue is that the after the VPN the customer will be seen with the VPN ip address and not the original ip address, so I don't think that the Active director...

Global Protect and DNS configuration

Hi All, I have a question regarding Global protect and DNS. In the Global protect configuration we can only configure 2 DNS servers in the Agent>Network Services. Is there anyway additional DNS servers can be configured? We have more than 2 DNS servers in the estate and would like to ensure more than the 2 are used. What is the structure that...

a.jones by L3 Networker
  • 6788 Views
  • 2 replies
  • 0 Likes
  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
Labels