This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

VPN Connection Failed

Good night dear.Anyone have the solution for the error below, please? After entering correct login and passwords, the GlobalProtect reports the following errors: "Connection FailedGateway: GW_EXT_DCSP_A3: The network conection is unreachable or the gateway is unresponsive. Check the network connection and reconnect." PS: I've formatted the not...

A.Bastos by • L0 Member
  • 3972 Views
  • 2 replies
  • 0 Likes

Resolved! Pinging Global Protect Clients

I am trying to troubleshoot a user who is claiming they are getting disconnected from GP VPNdue to issues seen at the application tier. I show them logged on since just before 7 and traffic logsappear to show continuous TCP traffic in the last five hours since log on. But I was thinking I'd puton a recursive ping to her laptop. But that traffic ...

MichaelMedwid_0-1630695801592.png

GlobalProtect - Autoblock/kick users when vulnerability exploit is detected?

I'm curious if anyone has crafted either a vulnerability profile or security policy that would disconnect or auto-block a user if their a vulnerability exploit is attempted while they are connected via Globalprotect. We've set up event logging that can flag and email my team whenever a user starts displaying malicious or compromised behavior whe...

Resolved! GP portal with multiple gateway can automate failover between multiple gateways when highest priority gateway gets down ?

whether GP portal (containing Multiple GP Gateways) can automate enforcement of GP Gateways in the event when primary GP Gateway gets down due to any undesired reason. If the failover between gateways is automatic; without users noticing that they have been disconnected and re-connected to the other gateway >

Global Protect in Thailand

Hello. I'm working from Ukraine from mcbook with Global Protect vpn which is used to access jira etc. I'm considering moving to Thailand for a few months.Can I be sure my vpn will still work properly from Thailand? What are the risks? Can Global protect be banned or restricted in Thailand? Do I need to make any additional arrangements or setting...

Elena89 by • L0 Member
  • 3170 Views
  • 2 replies
  • 0 Likes

Implications of "No direct Access to Local Network" toggle in Global protect client settings?

Hey folks. I, like probably a lot of us these days, use Global protect for the major percentage of the company's workforce. I run split tunneling - internal resources go over the tunnel, anything else just uses the local internet. Recently, I have had the need thrown at me the requirement to provide split tunneling for a set of addresses which a...

darren_g by • L4 Transporter
  • 6331 Views
  • 4 replies
  • 0 Likes

Configure GlobalProtect VPN Client only for certain domains

Hello there,My name is Federico Iglesias, I have started working for a company that uses GlobalProtect as a VPN client.Sometimes I am having serious problems with the connection speed when the VPN is active.I need to be able to use the VPN for the corporate domains and for the rest of the outgoing connections use my local connection.I have been ...

Global protect gateway error - Invalid cert

The global protect was able to connect to all of the gateways. Since last week the global protect is showing error "The server certificate is invalid. Please contact your IT administrator"However, when i'm switching to a different ISP provider i'm able to connect to the same gateways. Global protect - 5.2.6PAN-OS - 9.1.8

BipinK by • L0 Member
  • 5774 Views
  • 2 replies
  • 0 Likes

Resolved! DHCP address assignment for Global Protect VPN

All, I am working on a PA-220 LAB, in preparation for a PA 820 rollout. I have setup and configured my Global protect VPN. When it comes to DHCP, I know I can't use my DHCP servers but have to rely on DHCP from the firewall. That is OK. My question is this: For my VPN users, If I create a DHCP scope in Network>GatewayS>MyGateway>Agent&g...

RussMc by • L1 Bithead
  • 16753 Views
  • 12 replies
  • 0 Likes

Globalprotect: Multiple gateway on the same firewall

Hello good people. We are planning globalprotect redundancy on our PA-3050 with multiple ISP. Here is our scenario: 1 Portal1 Gateway What we wanna do: 1 Portal 2 Gateway our existing gateway is going through tunnel mode via tunnel.1what I want to know is that, can I run my second gateway via the same tunnel tunnel.1? or Do i need to create a n...

Resolved! Is it possible to share which Globalprotect VPN address was assigned to which user/real client ip address to other systems?

Hello to All, I am interested if Palo Alto is used as the Globalprotect VPN solution but after it there are other systems that may benefit from user group policies, howcan this be done? The issue is that the after the VPN the customer will be seen with the VPN ip address and not the original ip address, so I don't think that the Active director...

Global Protect and DNS configuration

Hi All, I have a question regarding Global protect and DNS. In the Global protect configuration we can only configure 2 DNS servers in the Agent>Network Services. Is there anyway additional DNS servers can be configured? We have more than 2 DNS servers in the estate and would like to ensure more than the 2 are used. What is the structure that...

a.jones by • L3 Networker
  • 6899 Views
  • 2 replies
  • 0 Likes

upgraded macOS to Big Sur and users cannot connect to globalprotect

Dear Community! We have upgraded the macOS to Big Sur and the users fail to connect to the GP gateway due to server cert verification failed P 474-T17783 08/16/2021 14:25:34:351 Debug(1042): Trust evaluation properties ( { error = "Host name mismatch"; title = "xyz.xyz.xyz.xyz"; }) P 474-T17783 08/16/2021 14:25:34:351 Deb...

Carracido by • L4 Transporter
  • 4752 Views
  • 1 replies
  • 0 Likes

Resolved! Globalprotect report generation on users

Is it possible to generate a report about the average logged in users in global protect I can see who is currently logged in by going to Network>>gateway>remote user, but no reports on it. I also know the maximum number of users for that firewall PA3220 which is 1024 users

RemusDV by • L1 Bithead
  • 15978 Views
  • 7 replies
  • 0 Likes
  • 1703 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks