Authentication Cookies Generation and Authentication

I am trying to a set up an implementation of pre-logon, then SAML w/ Client Certificates.

Utilizing a machine certificate I can configure how I want with no issues, but using only a client (user) certificate, pre-logon doesn't work, which is expected

GP Debug Help

We've been having difficulty with a particular use trying to connect with cert based authentication. 
What's this telling me "failed to get portal config", "restrore last portal config from file" etc?
Is there a good resource on these debug message gen

Global Protect False Negative Status "Portal Failed"

User running Global Protect 5.2.5-66 on Win 10 on Surface Pro was getting message "Portal Invalid". But when our tech remoted into her machine, he was able to see she could reach all internal resources. Any thought as to why GP would show Portal Inva

GlobalProtect Portal authentication by certificate fails with "Valid client certificate is required"

I have been trying for some time to get a mutli-stage GP login working in an always-on VPN. Going from an existing user/pass login to both the Portal and Gateway (with third party MFA over radius, cookies to prevent dual auth request), to a certifica

Trying to set access rules for GlobalProtect VPN

We're looking to set up access rules/controls for our VPN, and I'm having some trouble figuring it out.

We already have our gateway and portal set up, and have it whitelisted to only allow specific users through. However, we want to set up a second p

Send message to user after connecting

Hi all,

I'm changing the portal external gw of my company.

I've sent an email to our users but I'm sure they'll never read it, so on switch date they will start calling our help desk because "vpn has stopped working".

Is there any way to send a message

ip pool usage snmp monitoring

Hello,

I want to monitor the usage of each ip pool for global protect with snmp, to have an alarm or something when the pool is reaching limit, i didn´t find an oid for this purpouse, but maybe there is another way to do it, anyone have an idea to ma

Is there a way to delete for force expire a GP cookie?

If I wanted to force testing the certificate and make sure the cookie wasn't being used to extend an old connection, 

is there a means of manually deleting the Global Protect cookie on a client machine?

What is the meaning of GP app setting "Allow GlobalProtect UI to Persist for User Input"

What is the meaning of GP app setting "Allow GlobalProtect UI to Persist for User Input" , for what purpose this option we can use ?

Global Protect w Azure SAML/MFA won't trigger logon dialog box

On my Cisco ASA I have SAML configured and when I logon I get prompted with a browser dialog box for user name and password which then triggers an MFA token to my smart phone. But for Global Protect the client is going straight to Authentication Fail

Global Protect Logs Cookie Expired Before Expected

I am trying to understand how I could have two Global Protect cookie expiries within a half hour of successful certificate authentication. 

7:04 Certificate Auth Successful and IP assigned

4/12/2022 7:04 portal-auth login Certificate LAPTOP-ADHDS8HOL

Problems with Android through SAML in global protect

Hello,

When trying to log in through SAML in global protect, the password typing is very slow, taking about a minute to be able to type it. 

Affected devices:
- Samsung SM-T585/ Android 8.1.0
- Samsung SM-T595/ Android 10
Global protect version:
Global pro

GP - Split tunnel is working like full tunnel

Hello All!

I configured the GP to be a split tunnel. When I connect, I can access internal resources, but no Internet access. Normally, a default GW gets assigned of 0.0.0.0 on the PAN adapter I thought. There's no GW. External traffic is trying to r

Global Protect on MAC stuck at Portal Prelogin

Hi !

I am trying to connect to GlobalProtect via Mac - on Windows (same user) everything works fine. 
Pressing the Connect button on Mac shows the Azure Login + 2MFA appears as expected but as soon as I enter the Code
a blank screen appears and Logs are