GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Global Protect Internal Gateway/VPN

Can we have Global Protect Internal VPN working same as external, means on-demand and when we connect to internal gateway we should get an IP assigned from firewall. In that case we can restrict that IP pool in security policies to access critical IT Infrastructure, allowing management of IT Infrastructure only from that internal IP pool. I un...

Global Protect Disconnections

Hi everyone, hope someone can help me out with this. I'm looking into an issue whereby a user suffers frequent drops when connected to Global Protect. Apparently he sits next to the router and Internet is good. Today he reports drops at the following times: Log for 08:30 (only dropped for a few seconds)Log for 10:33 (dropped for 5 secs)Log for 1...

BChana by L0 Member
  • 4878 Views
  • 1 replies
  • 1 Likes

Where is 5.2.13 for Windows?

I am still looking/waiting on 5.2.13 to address the most recent security vulnerabilities. A couple of weeks ago they updated the bulletin to indicate the issue was not present in 5.2.13, but there is no 5.2.13 that I can find on Palo's site or on the actual firewall's software page. Surprised to see that 6.0.1 was released this week to addres...

GP uses Microsoft Account connected to Windows 11 User | Can't declare actual VPN User

I am trying to connect to an employer's network using an different account that's different from my Microsoft account connected to my Windows user. However, I am not able to declare my username when connecting, I just get an error screen telling me that authentication of my other Microsoft account failed.Is this due to Internet Explorer 11 being...

GP disconnects in a set up with two ISPs when the primary link is down and users try to connect using the secondary link

Good morning,in production we have a pair of PA-440 in HA (10.1.5). The firewalls have been configured with double VR as described in this article:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFiCAKThe firewalls are connected to two Internet links with two different Providers.We have therefore configured two Portals...

Portals and Gateways General Question

I have two separate portal/gateways on two separate PANs. Call them gp1.acme.com and gp2.acme.com. If I wanted to make the gateway on gp2 be primary for laptops hitting gp1.acme.com portal - what happens at the network level? I presume I add a second gateway to portal gp1.acme.com. When the GP client reaches gp1.acme.com does it inform that clie...

palomed by L3 Networker
  • 2333 Views
  • 1 replies
  • 0 Likes

Globalprotect verison 5.2.8 doesnt upgrade on some of the users

Hi Team, We have currently updated GlobalProtect to 5.2.11 from 5.2.10. While running report we came to know that some users are still on 5.2.8 and client is not getting updated on those devices. Can you please suggest if there an issue with version 5.2.8? Currently we are planning to push 5.2.11 version on those machines via software center but...

What am I doing wrong with Global Protect updates?

I am currently running GP 5.2.7 on a PA-3220 on 9.1.12-h3 and 99% of the time it is fine. I have an issue with a few of my developers with SQL Server Management Studio dropping connection.....but only SSMS. Was going to try newer versions of 5.2.x and see if that helps them out - just installing manually opposed to pushing through the firewall. ...

1.png
2.png
3.png
4.png

GlobalProtect Pre-logon tunnel rename doesn't work as expected

Hi Guys, We are currently running PanOS8.1.1 have some issues with global protect pre-logon. I have configured pre-logon as per below article.https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-Pre-logon/ta-p/136131 Problem we have is pre logon works as expected, however when user logged in to the c...

Namalw by L1 Bithead
  • 14956 Views
  • 8 replies
  • 1 Likes

Getting uptime information for a GlobalProtect connection?

Hello, Is there a way (programmatically) to access current uptime for an active GlobalProtect connection? I need to warn the users of my program well before (15+min) the connection times out. We are radiologists, and VPN dying in the middle of reporting of an urgent case causes all kinds of problems and lost work. Uptime under GP Settings refres...

BrankoB by L1 Bithead
  • 4743 Views
  • 4 replies
  • 0 Likes

Global Protect Pre-logon does not consistently switch IP pools

We have a client with Global Protect Pre-logon, which assigns different IP pools to the Pre-logon user than to the known client. Sometimes we see the connection get the Pri-logon IP and then switch to the known client IP, but other times we see it hang onto the Pre-logon address. Firewall PAN-OS 8.1.15-h3Client version 5.1.5 Any suggestions on w...

GlobalProtect VPN vs Clientless VPN

Hello Bros, Currently, we are using GlobalProtect VPN, which is working great.and now we are discussing of using the Clientless VPN supported by the PanOS version 10 and later.Do you recommend using the Clientless VPN over Globalrotect VPN? what is your recommendations regarding using the clientless VPN if you recommed using it ov...

Resolved! Configuring GP DNS in Agent/Client Settings vs Agent/Network Services

Is there any difference configuring DNS in Agent/Client Service/Client Config versus Agent/Network Service. I initially setup in Agent/Network Service and is allow for a primary and secondary DNS server to be specified. The problem there is it limits me to two and I'd like to have a third. Agent/Client Service/Client Config has youenter DNS ser...

palomed by L3 Networker
  • 3746 Views
  • 1 replies
  • 0 Likes

When attempting to log-in to GlobalProtect, a user will hit the enter key and the the username/password disappear. They have to physically click login

Hello, As the title says: when attempting to log-in to GlobalProtect, a user will hit the enter key and the the username/password disappear. They have to physically click login and it'll work. We leverage DUO authentication as well but it only acts like this for GlobalProtect signon. I'm curious if this is a bug or if there is some sort of reged...

equiknox by L0 Member
  • 4873 Views
  • 3 replies
  • 1 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
Labels