GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Resolved! GP Certificates and SSL Decryption

Hi All, I have configured GP in PreLogon mode so there is a machine certificate deployed. My certificates are locally generated on the Palo Alto. The Local CA certificate is due to expire and the SubCA expires shortly after. What will happen to user connections if I renew both certificates for another year using the renew button. Am I going to h...

a.jones by L3 Networker
  • 4838 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect and IPv6

So we're rolling out IPv6 to our network, one thought that just crossed my mind is what kind/if any support for IPv6 does GlobalProtect have? An issue I see is when we start listed AAAA records for internal servers in DNS, external VPN users will get those responses and will try to access those directly (and be denied) unless I can route them ...

bgmncwj by L2 Linker
  • 22143 Views
  • 9 replies
  • 0 Likes

Help with configuration profile for GlobalProtect

I'm attempting to create a configuration profile for GlobalProtect so that users don't have to enter the vpn server address. When testing i have found that Globalprotect still Prompts to type in the Address. Has anyone been successfully set up a script to add the Portal address without having users typing it in manually please help!!

tripps by L0 Member
  • 2637 Views
  • 1 replies
  • 0 Likes

GlobalProtect Cannot connect to local gpd service

Installed GlobalProtect version 5.0.3 on Ubuntu 20.04. Getting error message "Cannot connect to local gpd service". Have tried uninstalling and re-installing. Have tried rebooting. Nothing helps. Any idea what's wrong? [200~kmooney@kmubuntu210810:~$ lsb_release -aNo LSB modules are available.Distributor ID: UbuntuDescription: Ubuntu 20.04.2...

kmooney by L0 Member
  • 5291 Views
  • 1 replies
  • 0 Likes

Duo MFA with GlobalProtect on Ubuntu

All,Duo and GloblaProtect work fine on Windows and MacOS, but not on Linux. The HTML authentication screen pops up on Linux but before anything can be entered the screen disappears. This appears in the PanPGui module. Is there a client-side or server-side issue to make the HTML authentication screen stay up (and not disappear) so that a user ...

wsmith by L1 Bithead
  • 4438 Views
  • 4 replies
  • 0 Likes

Can password expiry warning from AD be shown as pop-up via GlobalProtect?

Hi, is it possible for end-users to get pop-up of password expiry warning from AD via GlobalProtect? and how to set up that?in current setup of GlobalProtect, I have; - on-demand method - LDAP Authenticationand users daily connect GlobalProtect by on-demand method and access to internal resources. I am now trying to newly set up GPO in AD to ena...

Is there a feature to map specific mac address to specific user in GP VPN

Hi Team, I have a situation where users a should not be able to login to user b machine as the same goes to user b as well.Is there a way to map the HIP profile to a specific user like mapping the specific mac address to a specific user so that the mentioned user alone gets logged in to that specific system or machine.Kindly share any documents ...

Resolved! GlobalProtect Clienless VPN Feature fo Apps Tunneling

Hi Folks, In another platform, when we use webvpn/clientless, we can do application tunneling. Basically It allows users to use their own application installed on their devices like putty, smartconsole(chekcpoint) to access internal resources.Is this scenarion possible on paloalto clientless vpn ? Thank you for the answer. Regards,Adam

Linux client wayland support (icons, statusbar) and packages for different Linux distributions

Greetings Palo Alto!I'm having PA Globalconnect at work and, to be fair, the official client is so bad that I have to use opensource compatible version "openconnect". Sometimes this is not recommended by companies; so:1) Please make the Wayland tray icon support as well as fully good-quality CLI support (neither of these are available at any of ...

GlobalProtect - "Refresh Connection" API call via DLL/etc

Is there an API or any documentation on how to call the GlobalProtect "Refresh Connection" function from external code? I want to be able to call this function from custom external code. The reason why is to fix a connection issue we are having through automation since we don't want to have to ask users to manually click that option. If no exte...

AAT by L1 Bithead
  • 17746 Views
  • 17 replies
  • 0 Likes

Resolved! Global Protect Not Installing Virtual Network Driver

Host OS is Windows 10 Pro ARM Build 21354Global Protect 64-Bit Windows 10 v 5.2.1-9 Installation appears to be successful, but GP fails to connect to portal. An Intel install shows a PAN GP Virtual Ethernet driver install under Network adapters in Device ManagerThis driver does not appear in the ARM install. Similarly, the Intel install has pang...

  • 1685 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels