GlobalProtect MFA with Kerberos and RSA

Hello everyone, Palo Alto noobie here 

I am trying to configure GlobalProtect VPN with MFA authentication using Kerberos authentication protocol against AD and RSA hard tokens.
I have configured the GlobalProtect portal and gateway using different loo

Global Protect - frequent drops with SQL Server Management Studio....not with Windows VPN

Getting users complaining about frequent disconnects when the use SQL Server Management Studio over Global Protect....but when they are connected with the old school Windows PPTP VPN, it never drops. Not only that, they say it is faster.

My GP policy

Assigning the same IP to a GP client based on it's MAC address

I'm trying to connect a client computer to my corporate network via global protect, and once I'm connected, I need to print to that computer through the Linux service called CUPS. In order to print to this computer, I need to know what it's IP addres

Global Protect got intermittent connection after upgrade to PanOs 10.1.3.

Hi Support, Global Protect got intermittent connection after upgrade to PanOs 10.1.3. Any bugs on PanOs 10.1.3 for global protect? We try downgrade the PanOs version and seems like it resolved the issue. #globalprotect

GP with SAML to Azure not prompting MFA on phone

Hello Everyone,

GP is fully configured but there is an issue with SAML authentication to Azure. The authentication part is fine but I am not getting prompted on my phone for MFA. In fact my Azure credentials need to be entered twice before the client

GP client keeps prompting for credentials even with save user cred selected in portal config.

Hello,

So as the title says, but the catch is this is not consistent - one user we tested with GP client 5.2.7 and .10 and .4 and he logs in without the credentials prompt.

But for others with 5.2.4 it keeps prompting for login after every time it di

GlobalProtect Mac prompt "GlobalProtect would like to access files on a network volume."

Mac (BigSur, Monterey) End-users are being prompted to Allow / Don't Allow "GlobalProtect would like to access files on a network volume." This has not prompted users on versions of GlobalProtect client prior to 5.2.10. Customer wants to know what fe

Not using AppID but GP connections are denying on apps for 10 minutes before allowing traffic to work properly

We are currently working on trying to get PA-3220s working properly and Global protect working but are running into an issue.

Once a user connects, recently its starting to deny based on app ID, however in our VPN policy we have any specified.  The t

Script signout of Remote Users in GlobalProtect gateway

I would like all automatically sign out all remote user connections at a specific time each day, for example 7pm local time.  Can that be done?  Configuring a connection time limit is not the same thing, not everyone signs in at the same time.  

Global Protect undocumented issue

Hi,

does anybody know what does this mean? (User overrides reached the limit)

Thank you, Jan