This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Resolved! Single Portal with Multiple Gateway without GSLB | What happen when the Portal is down ?

Hi Folks, I have PaloaltoFirewall on DC and DRC, and we are going to configure GlobalProtect for SSLVPN.I understand that we can configure multiple gateway on the Portal, so that when one gateway is down it can failover to the next available gateway.Let say i configure the Paloalto on DC as the Portal. And the Gateway consist of Paloalto DC (hig...

Global Protect 5.2.6-87 Not able to see all folders on DFS file shares

We have some users who cannot see and processes cannot access some of their folders on a DFS file share when they are on the GP VPN, but they can see them when they revert to our previous VPN (we are just rolling out GP now). They do not have offline files enabled. Other users have no problem seeing folders on GP. I searched Known Issues, but ...

Global Protect PANGP Virtual Ethernet Adapter disabled after Jun21 MS Security patches. (KB5003974 suspected)

Starting after Microsoft Cumulative and Security updates released in June 2021, our users have been experiencing issues where they are unable to connect to Global Protect after resuming from a reboot or sleep. The blue "connect" button is present, and our portal is selected, but clicking the button does nothing. The PANGP Virtual Ethernet Adapte...

GP Issue 2.PNG
GP Issue 1.PNG
GP issue 3.PNG

Global Protect does not connect on First attempt

Hi Community, We have few users where GP does not connect on first attempt.User need to try few times to make it work.We are using GP 5.2.5 and PAN OS 9.1.8 Firewall i do no see logs for unsuccessful connection.We are using Pre-logon then on demand. Below are GP logs form user PC P5188-T16948)Debug(3690): 07/15/21 08:44:05:492 REGION-PRIO, gate...

GlobalProtect gateway limit

We have a pair of PA-850 firewalls, and we are running into an error when pushing configuration from Panorama that contains 7 GP gateways (6 external and 1 internal), and 6 portals. . global-protect -> global-protect-gateway -> GlobalProtect AlwaysOn constraints failed : Maximum number of GlobalProtect gateway configuration exceeded The on...

creating split tunnel on full tunnel enforcement

Hi We’ve recently discovered that the Mac GlobalProtect client does not terminate existing network connections after full tunnel with no access to local network is established. This is reproducible In the following procedure:Disconnect from VPNConnect to resource that you should be unable to while connected to GlobalProtect – the connection must...

Multiple Class C addresses PA setup

I’m configuring a PA3220 for three external class C addresses we own (192.168.10.0/24, 192.168.11.0/24, and 192.168.14.0/24). We have two ISP Internet connections on two different campuses. We are using trunking to carry the different VLANs, so the outside networks are on the same physical interface. The inside network is on another physical int...

Firewall Network.jpg

Send Logs from GlobalProtect App on iOS managed via Intune

Does anyone else have issues on iOS sending logs from the GlobalProtect client to email when the device is managed via Intune? We manage our devices via Intune and use the MS Outlook app for email. We are having an issue with the GlobalProtect app and are working with support and they need the logs from this iOS device. When trying to do the S...

Pre Logon then on Demand traffic flow

Hi Community, We have GP prelogon then on demand.For pre logon we are using machine cert for authentication.For on demand we are using SAML MFA. I see that prelogon works fine for few users but one they logon to PC and click on connect they get error that PCis not in intune. So need to understand that for pre logon it uses only machine cert for ...

Retain Connection on Smart Card Removal behavior on GP

Hello, There are Smart Cards being used for the GP authentication. One of the options for Windows endpoints is to disconnect the GP as soon as Smart Card is removed and that was tested, option in the app settings: "Retain Connection on Smart Card Removal" set to No.But the result after removing the Smart Card is that prompt is shown to the user ...

nikoo by • L3 Networker
  • 4802 Views
  • 4 replies
  • 0 Likes

global protect clientless using guacamole

Hi all,Start working with global protect using MFA and try using guacamole for proxy rdp connection.after building the guacamole server (updated one using Guacamole 1.1 on Ubuntu 20.04) the server is working on the internal network but when accessing it from outside I get the following message. Access Error: 404 -- Not FoundCan't locate document...

SShnap by • L3 Networker
  • 10872 Views
  • 5 replies
  • 0 Likes

Radius Auth Profile with PEAP-MsCHAPv2

Has anyone successfully integrated Radius Auth profile PEAP-MsCHAPv2 with NPS or any other Radius platform? I have configured my Radius Auth Profile and attached relevant Cert profile to it as per below knowledgebase article.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmkRCASHowever we are unable to establish succes...

NamalW_0-1600837232072.png
Namalw by • L1 Bithead
  • 12447 Views
  • 2 replies
  • 0 Likes

Resolved! Restrict GP gateway selection to specific user groups via panorama

Due to some internal department/company shuffling we have a requirement to authenticate a specific subset of our user base via ldap only, bypassing our existing SAML setup. Reading other forum posts and Palo docs I've learned that once you enable SAML on a gateway that's pretty much all you can use, so I'm looking at setting up a secondary gatew...

jjsimpson_0-1620934233088.png
jjsimpson_1-1620934447675.png
jjsimpson_2-1620934681139.png

Event Reminder: GlobalProtect - Secure and Seamless Remote Workforce Deployment

Hey everyone, Just incase you missed it, I wanted to take a second and let everyone know about a new LIVE event that is happening on July 6th at 8 AM PDT. This event is going to be all about GlobalProtect and how to deploy a secure and seamless remote workforce. It is going to be a Live interactive event that will be covering all aspects ...

jdelio_0-1623773094470.jpeg
jdelio by • L7 Applicator
  • 3375 Views
  • 2 replies
  • 1 Likes
  • 1685 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Latest Comments
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks