This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global protect authentication

Hi team,In Global protect, is it mandatory for the user to authenticate in the portal and also in the gateway? I have tried to remove the authenticator in at least one of them so that it does not ask 2 times for user and pass without success.Any idea? why do I need both? what happens if I use different authentication profiles? Is it possible to ...

Alpalo_0-1648723055844.png
Alpalo by • L4 Transporter
  • 2135 Views
  • 1 replies
  • 0 Likes

Global protect client updates unreachable in azure.

While setting up global protect from my azure palo alto appliance I noticed when I try to 'check for updates' I get this error "Failed to check upgrade info due to Unknown error. Please check network connectivity and try again." However I am able to connect to updates.paloaltonetworks.com. DNS is setup and running properly. I am even able to get...

Global Protect - Flagging security issues with Insurance companies

I have several clients that are getting push back from their Cyber Security companies about the following issues (or non Issues). We have one company refusing to renew because of it and its coming up more often. I have a ticket open with support which I have been waiting forever to hear back. How do I force a login requirement? I know it used to...

Global Protect SSO Authentication Error after 30 Minutes

We are using the default browswer option for Onelogin authentication. So when we log into the computer the default browser launches which has the Onelogin screen. When we enter the username and password it logs the GP in and then all of the applications behind Onelogin use the token in the default browser to as the credentials. If we wait until...

GP Certificate CN Mismatch issue when adding on more new Global Protect Gateway/Portal

I have two PA-820 operating in Active/Passive HA mode. The WAN set up is a dual ISP connection to a single ISP which are configured using BGP. I was adding a new Global Protect Gateway and portal that is segregated from the existing one to connect separate group of users. Separate domain name and public IP with standalone SSL Certificate created...

sisayfe by • L1 Bithead
  • 3596 Views
  • 0 replies
  • 0 Likes

Resolved! Active-Passive firewall globalprotect clientless error code -1

Hi, something strange start showing, I am using more than two years active-passive firewall with global protect client and clientless portals.suddenly now when I move the traffic to the 2nd firewall the clients are receiving this error code -1. on the 2nd firewall under monitor-log-global protect, I notice some logs of "Success - quarantine - q...

SShnap by • L3 Networker
  • 3010 Views
  • 1 replies
  • 0 Likes

GW is receiving the routes from the satellites even though those routes were tagged "No Install" on the satellite firewalls

The intended routes, which are tagged "no Install" are not in the routing table of the satellite firewall. Locally the tag "no install" is working, but for GP satellite setup it is not working and the routes are propagated anyways, regardless of the tag "no install"Is there any clarification or reason for this issue ?

global protect 4.1.11 allow users to change VPN password?

Hi guys,I'm currently examining a PA 850 firewall which is providing VPN for remote users to connect.the global protect client version is 4.1.11-9 and currently there's no user account integration with AD or RADIUS. The demand is to allow user (accounts) to change their own VPN passwords.just searched some information such as https://knowledgeba...

john.k by • L0 Member
  • 1718 Views
  • 0 replies
  • 0 Likes

Resolved! GP Client not updating transparently on Win10 machines (5.2.6 -> 5.2.8)

I've done two previous client updates through the firewalls that went fine. The first was 5.0.4 -> 5.1.5 with the portal set to allow user to update manually. Everything went fine. At the time, I think PAN-OS was 8.1.somethingThe second was 5.1.5 -> 5.2.6 with the portal set to allow transparently. Everything went fine. PAN-OS was 9.1...

Problem with GlobalProtect after certificate renew

Hello there,Yesterday our certificates used for GlobalProtect expired. I reneved them like last time and then - we lost possibility to connect to our institution from endpoints. Nothing more were changed. Error seen on endpoint: Now nobody can connect via GlobalProtect using AD credentials. Currently our settings in Agent config looks like: Wh...

1.jpg
3.png
2.jpg
Damiano by • L0 Member
  • 3096 Views
  • 1 replies
  • 0 Likes

GlobalProtect - Client cert not present

This past week we have experienced this issue where users are unable to connect to GlobalProtect. This is happening at random and on multiple firewalls with version 9.1.11-h3, GlobalProtect client version is: 5.2.3 Looking at the logs this is what it shows under Monitor -> GlobalProtect Strangely enough, the certificate IS installed on the c...

bernardohernandez_0-1643416673233.png

Configurate secundary agent profile with other ip pool

Good morning,I need configure a secundary agent profile with other ip pool. I have just configured secondary agent profile in the Global Protect GW with a specific range and two specific users. When the user connects, it does not apply this new profile and continues to use the old one with old range. Could anybody help me with it? Regards Than...

Alpalo_1-1646903258998.png
Alpalo by • L4 Transporter
  • 2683 Views
  • 4 replies
  • 0 Likes
  • 2069 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks