GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Global Protect False Negative Status "Portal Failed"

User running Global Protect 5.2.5-66 on Win 10 on Surface Pro was getting message "Portal Invalid". But when our tech remoted into her machine, he was able to see she could reach all internal resources. Any thought as to why GP would show Portal Invalid when actually connected and passing traffic?

palomed by L3 Networker
  • 1577 Views
  • 0 replies
  • 0 Likes

GlobalProtect Portal authentication by certificate fails with "Valid client certificate is required"

I have been trying for some time to get a mutli-stage GP login working in an always-on VPN. Going from an existing user/pass login to both the Portal and Gateway (with third party MFA over radius, cookies to prevent dual auth request), to a certificate login to the Portal (for automatic login/updates of GP client configs and immediate internal h...

Resolved! Global Protect VPN installation on Mac OS

Hi. My IT provider can't assist in setting up / configuring my Global Protect VPN for WFH. We are talking Vodafone Business here, and for over a week, we have been unsuccessful, had various reinstallations and the message is still "Gateway GP-Gateway: the network connection is unreachable or the gateway is unresponsive. Check the network connect...

JFontes by L1 Bithead
  • 4181 Views
  • 3 replies
  • 0 Likes

Trying to set access rules for GlobalProtect VPN

We're looking to set up access rules/controls for our VPN, and I'm having some trouble figuring it out. We already have our gateway and portal set up, and have it whitelisted to only allow specific users through. However, we want to set up a second portal/gateway for our admins to use, separate from our users. My problems stems from where to beg...

Send message to user after connecting

Hi all,I'm changing the portal external gw of my company.I've sent an email to our users but I'm sure they'll never read it, so on switch date they will start calling our help desk because "vpn has stopped working".Is there any way to send a message after the user connects to global protect with a custom message like "remember that...."?Thanks

Poledi by L1 Bithead
  • 3716 Views
  • 3 replies
  • 0 Likes

ip pool usage snmp monitoring

Hello, I want to monitor the usage of each ip pool for global protect with snmp, to have an alarm or something when the pool is reaching limit, i didn´t find an oid for this purpouse, but maybe there is another way to do it, anyone have an idea to make this possible?.

BigPalo by L4 Transporter
  • 2257 Views
  • 1 replies
  • 0 Likes

Global Protect w Azure SAML/MFA won't trigger logon dialog box

On my Cisco ASA I have SAML configured and when I logon I get prompted with a browser dialog box for user name and password which then triggers an MFA token to my smart phone. But for Global Protect the client is going straight to Authentication Failed without prompting me for user name and password - neither within the Global Protect client nor...

palomed_0-1649870982193.png
palomed by L3 Networker
  • 6003 Views
  • 0 replies
  • 0 Likes

Global Protect Logs Cookie Expired Before Expected

I am trying to understand how I could have two Global Protect cookie expiries within a half hour of successful certificate authentication. 7:04 Certificate Auth Successful and IP assigned4/12/2022 7:04 portal-auth login Certificate LAPTOP-ADHDS8HOL US ACME-99918411157 55.55.58.239 0.0.0.0 0.0.0.04/12/2022 7:04 gateway-getconfig configuration SS...

palomed by L3 Networker
  • 2599 Views
  • 0 replies
  • 0 Likes

Problems with Android through SAML in global protect

Hello,When trying to log in through SAML in global protect, the password typing is very slow, taking about a minute to be able to type it. Affected devices:- Samsung SM-T585/ Android 8.1.0- Samsung SM-T595/ Android 10Global protect version:Global protect version 5.2.11 (1521109)Any idea? Can anybody helps me?

Alpalo by L4 Transporter
  • 1861 Views
  • 0 replies
  • 0 Likes

GP - Split tunnel is working like full tunnel

Hello All! I configured the GP to be a split tunnel. When I connect, I can access internal resources, but no Internet access. Normally, a default GW gets assigned of 0.0.0.0 on the PAN adapter I thought. There's no GW. External traffic is trying to route via the Internal's ISP and not it's own.

DJ_Palo by L1 Bithead
  • 2722 Views
  • 2 replies
  • 0 Likes

Global Protect on MAC stuck at Portal Prelogin

Hi !I am trying to connect to GlobalProtect via Mac - on Windows (same user) everything works fine. Pressing the Connect button on Mac shows the Azure Login + 2MFA appears as expected but as soon as I enter the Codea blank screen appears and Logs are showing the following:"gp_version":"5.2.9-35","error_stage":"Portal pre-login","error":"Could no...

schimeha by L0 Member
  • 5676 Views
  • 3 replies
  • 1 Likes

How is it determined if a patch is "missing" or not?

Hypothetical scenario: All Windows 10 clients connecting to Globalprotect. All are managed by System Center Config Manager.I have a HIP Object that matches if there are any patches missing with a severity of 1 or greater.I have a HIP profile with this object in it that denies access to a subnet if there is a match.It is 2 days after Patch Tues...

Failures to connect with GlobalProtect 5.2.10 on Android 12 devices

We are able to connect from Android 11 devices with GP 5.2.5 but not from Android 12 devices using 5.2.10; the latter seems to fail when trying to allocation the virtual NIC for the VPN connection. We have a ticket open with PA but no resolve so far. Anyone have any ideas?27225)02/16 09:41:17:653488 - =JNI= ANDROID_ACTION_SET_VNIC_CONFIG, ret=f...

  • 2062 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors
Labels