This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

GlobalProtect Linux CLI - connect pre-logon

I'm trying to configure my client to automatically connect to the VPN when it is booted. This should happen before a user logs on. My shell script in cron is not running @reboot. The client connects perfectly when run by the user, but not pre-logon. The client version is deb_5.1.1.

cfinkenb by • L0 Member
  • 5252 Views
  • 2 replies
  • 0 Likes

HIP checks for anti-malware and mobiles

We want to enable HIP check on anti-malware for Windows and Mac. I have configured the HIP objects, Profile, and notifications for no match which is working but two issues. 1. the notification shows when IOS and android mobiles connect.2. How can I apply this to a policy to restrict for Windows and Mac unless they have up to date AV software and...

nathanh1 by • L0 Member
  • 4171 Views
  • 3 replies
  • 1 Likes

Resolved! Excluding MS Teams from GlobalProtect

I'm trying to exclude MS Teams traffic from GlobalProtect. We are using the entire O365 platform but I only want to exclude MS Teams. Has anyone been able to successfully get this to work? I found some older community posts but most seemed to have inconsistent results. I'm running PAN OS 9.0.x and GP 5.2.6. Is excluding "%LOCALAPPDATA%\Mic...

Does Global Protect support LEEF format on forwarding the log to Qradar

Hi Everyone, Greeting!!I have a concern regarding the Global protect log forwarding for forwarding the logs to Qradar SIEM Tool. The concern is about whether Global Protect support for LEEF Format if it does support i want a document that contains the required fields about the Global protect to be sent to the SIEM Tool.I want to confirm two thin...

Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure. This is achievable via powershell scripting on all Windows devices. However, we run into issues with the PANGP Virtual Ethernet Adapters being created by the GP 5.1.x softwar...

jsykora by • L1 Bithead
  • 8561 Views
  • 1 replies
  • 0 Likes

Global Protect After Prelogin the switch to user is not changing IP networks

We are using machine and user certificates from a windows server 2016 CA. to authenticate when using Global Protect.Step one is the prelogin connections and it works as intended. The IP address is assigned on 10.1.1.0/24 network.Once the user logs into the computer it is configured as always on VPN then switch to user certificate for the user V...

Connect to (2) different PAN environments at the same time

Hello all, Does Global Protect allow for making two concurrent connections to different environments at the same time? We have (2) pairs of PAN's in different data centers (on different subnets) and have a need for connecting to both environments at the same time. In the past we have used OpenVPN prior to migrating to PAN's. Is this possible ...

STI_IT by • L0 Member
  • 4020 Views
  • 2 replies
  • 0 Likes

Global Protect client - Log file size

Hello, We have just rolled out Global Protect on our workstation & mobile clients, and are starting to run into a bit of a problem.It seems that on some of the machines, the file : pangps.txt (log file) just keeps on growing.Now, in itself it's normal that the size increases a bit over time but we have had some machines where the log file be...

GlobalProtect 5.1.8 couldn't save username & password

I am using globalprotect vpn to my company. I would like to know how to save username & password?You can save it if you use older version (4.x) but you can't is you upgrade to 5.x.Windows 10 + GlobalProtect 5.1.8I could not find out how to save username & password after upgrading to 5.1.8.

RojerChen_1-1623739795174.png
RojerChen_0-1623739716499.png
RojerChen_2-1623740014833.png

Resolved! Setting up pre-login. Second Gateway totally necessary?

Hi I am trying to setup pre-login for my company I see I need to setup self signed certs and install them on all the clients but everything I have read says I need two separate global protect gateways setup. Can I not just setup the gateway we are already using and convert it to pre-login? Would doing this cause an issue?

GP connection Error

(T21400)Debug(1158): 06/10/21 17:58:32:971 SPStop is called(T21400)Debug( 783): 06/10/21 17:58:32:983 PreviousDNSInfo doesn't exist, no need to restore(T21400)Info ( 552): 06/10/21 17:58:32:983 not call uninstallClientConfig, netSetup=000001EBBD0BF770, clientConfig=000001EBBDC6E730, panMSService=000001EBBDA6B610, panMSService->IsConfigInstall...

VPN_Connection_Error.jpg

Resolved! Friendly Re-authentication

Hi folks,We have a number of users trialling our new Global Protect setup and it appears a small number are workaholics.We have the authentication window set at 10hrs (its Radius with TOTP) - and the authentication cookie also expires after 10hrs. From the user perspective, at the 10hr mark, all connectivity is cut and interactive apps (ssh for ...

GN_ROS by • L1 Bithead
  • 6867 Views
  • 3 replies
  • 0 Likes
  • 1712 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks