Hi All, Is it possible to customize/change the logo on the GP Client software. Thanks in advance.
Hi all,Start working with global protect using MFA and try using guacamole for proxy rdp connection.after building the guacamole server (updated one using Guacamole 1.1 on Ubuntu 20.04) the server is working on the internal network but when accessing it from outside I get the following message. Access Error: 404 -- Not FoundCan't locate document...
Has anyone successfully integrated Radius Auth profile PEAP-MsCHAPv2 with NPS or any other Radius platform? I have configured my Radius Auth Profile and attached relevant Cert profile to it as per below knowledgebase article.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmkRCASHowever we are unable to establish succes...
Due to some internal department/company shuffling we have a requirement to authenticate a specific subset of our user base via ldap only, bypassing our existing SAML setup. Reading other forum posts and Palo docs I've learned that once you enable SAML on a gateway that's pretty much all you can use, so I'm looking at setting up a secondary gatew...
Hey everyone, Just incase you missed it, I wanted to take a second and let everyone know about a new LIVE event that is happening on July 6th at 8 AM PDT. This event is going to be all about GlobalProtect and how to deploy a secure and seamless remote workforce. It is going to be a Live interactive event that will be covering all aspects ...
I have a few users reporting problems with opening some web pages in internet explorer (IE) when connected to GlobalProtect. Clicking on the email link simply opens up a blank page in IE. When the same link is pasted in Chrome, it works OK.When using Cisco AnyConnect, the problem with IE does not occur and email links open as normal. Has anyone ...
hello team we are trying to using local database of user for GP but adding DUO as 2FA doesn't work, still is not working we follow the below link from DUO: https://duo.com/docs/paloalto#:~:text=Click%20on%20your%20configured%20GlobalProtect,Profile%22%20selections%20for%20client%20authentication. we use the SAML option but when we try to authent...
We are implementing 2 factor authentication and it is failing intermittently when using security groups in the authentication profile. When we use "all" in the LDAP tree, it works like a champ. When we go to a single group, it fails with "user not in allow list" but when checking the user database, the user-id is listed. If we use the same au...
I'm trying to configure my client to automatically connect to the VPN when it is booted. This should happen before a user logs on. My shell script in cron is not running @reboot. The client connects perfectly when run by the user, but not pre-logon. The client version is deb_5.1.1.
We want to enable HIP check on anti-malware for Windows and Mac. I have configured the HIP objects, Profile, and notifications for no match which is working but two issues. 1. the notification shows when IOS and android mobiles connect.2. How can I apply this to a policy to restrict for Windows and Mac unless they have up to date AV software and...
I'm trying to exclude MS Teams traffic from GlobalProtect. We are using the entire O365 platform but I only want to exclude MS Teams. Has anyone been able to successfully get this to work? I found some older community posts but most seemed to have inconsistent results. I'm running PAN OS 9.0.x and GP 5.2.6. Is excluding "%LOCALAPPDATA%\Mic...
Hi Everyone, Greeting!!I have a concern regarding the Global protect log forwarding for forwarding the logs to Qradar SIEM Tool. The concern is about whether Global Protect support for LEEF Format if it does support i want a document that contains the required fields about the Global protect to be sent to the SIEM Tool.I want to confirm two thin...
It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure. This is achievable via powershell scripting on all Windows devices. However, we run into issues with the PANGP Virtual Ethernet Adapters being created by the GP 5.1.x softwar...
We are using machine and user certificates from a windows server 2016 CA. to authenticate when using Global Protect.Step one is the prelogin connections and it works as intended. The IP address is assigned on 10.1.1.0/24 network.Once the user logs into the computer it is configured as always on VPN then switch to user certificate for the user V...
Hello all, Does Global Protect allow for making two concurrent connections to different environments at the same time? We have (2) pairs of PAN's in different data centers (on different subnets) and have a need for connecting to both environments at the same time. In the past we have used OpenVPN prior to migrating to PAN's. Is this possible ...
BPry
on:
Global protect with LOOPBACK Interface
reaper
on:
GlobalProtect Mac Client ENDLESS POPUPS that TAKE FOCUS from other apps
BPry
on:
Semi-Disable Global Protect on Mac
