Assign Fixed IP Address to Global Protect Users with ldap+radius

Hi all,

I've tried to assign a static ip address to global protect connection using this kb https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UkxCAE but it doesn't work.

The support says that if we have ldap auth for username/p

GlobalProtect IPSec configuration

We have been using GlobalProtect for awhile but I just became aware that none of our clients are connected using IPSec even though the option is checked.

I can't see anything being blocked so I am wondering if it is a configuration issue of some kind

GlobalProtect connects, but doesn't download client updates on some MACs

We've setup a 3220 firewall to transparently download and install the GlobalProtect client to our MAC users. Once the client is Activated it gets pushed and installed on most of our user's MACs. About 25% of them though don't update to the new client

Since Migrating to PA-460 PAN-OS 10.1.3, SMS-message-based multi-factor authentication (MFA) did not display a prompt to enter the authentication code

Since Migrating to PA-460 PAN-OS 10.1.3, from PA-3020 PA-OS 9.1....... SMS-message-based multi-factor authentication (MFA) did not display a prompt to enter the authentication code.  

PA-3020 with PAN OS 9.1 

Firewall forwards incoming Global Protect a

GlobalProtect SSL error

(P19520-T11728)Dump (1338): 02/09/22 16:16:12:010 SSL_connect: initialization (P19520-T11728)Dump (1338): 02/09/22 16:16:12:010 SSL_connect: write client hello A (P19520-T11728)Dump (1355): 02/09/22 16:16:12:059 SSL_connect:error in SSLv2/v3 read ser...

Possible DNS Issue after GlobalProtect upgrade

Our GlobalProtect firewalls are running version 8.1.15 and another 9.1.4. We allow Split Tunnel, and one firewall has a 0.0.0.0/0 Include Access Route, and the other does not.  Both don’t have any Excluded routes. The one firewall (9.1.4) does have a

What's stored in the GlobalProtect encrypted cookie on the endpoint?

Global Protect traditional and ADEM

Is Global protect without Prisma ever going to get anything related to what ADEM does for prisma?   Would be super nice if some of the features would report back to local FW, or even just hold some information on the client for troubleshooting purpos