GlobalProtect Always-On Being Blocked by WDAC (AppLocker)

We are using always-on VPN prelogon SAML and it works fine. However, after deploying a WDAC (Windows Defender Application Control) policy to lock down a device to select apps, Global Protect prelogon no longer works on that endpoint. It works if we r

Ubuntu 24.04 Error: QLayout::removeWidget: Cannot remove a null widget.

After entering the VPN portal addresses and pressing Connect, the PanGPUI app becomes unresponsive. The PanGPUI.log file continuously logs the following error:
"QLayout::removeWidget: Cannot remove a null widget."

Could someone please help me resolve t

Way to disable logon prompt when start Global Protect client

New Global Protect user - I have an odd question regarding the Global Protect client. Is there a way to not have the sign on prompt when you start the client? We load the client at startup of the laptop to provide a way for our help desk to access th

GlobalProtect Internal Host Detection with Always-On and Enforcement

Hello,

I am trying to deploy GlobalProtect on some of our endpoints, but I'm running into a set of issues due to our business requirements.

The requirements are:
VPN is in Always-On with full enforcement
All traffic from those devices must stay inter

GlobalProtect - Unable to Access the Internet

Hello my LIVEcommunity friends,

I have a puzzler here for you all (I'm sure I won't be the only one with this issue). I have seen similar discussions, but none quite fit the bill. I have one user that cannot access Internet-based resources (web pag

Multiple DHCP Leases with Global Protect

Environment: panos 11.2.4 h5, GP 6.3.2-525, New customer/configuration

We are running into an issue where a GP user that logs in from their home, gets a DHCP/dns record tied to the GP MacAddress via our internal DHCP/dns Server in the expected subn

Versions of global protect

The current version of Global Protect is 5.2.13. Need to know what version to install next. Want to get to at least 6.2. Need support page for upgrading global protect and in what order the versions should be installed. Which ones need a REBOOT, and

Global Protect and Internal Network routing

Hello,

New Global Protect user here so bare with me. We have started using the Global Protect for our laptop users. As part of our configuration the client is loaded when the laptop boots up. The support team wanted this so they could still connec

GlobalProtect 6.x crashes

Hello

I have a problem with GlobalProtect on two laptops, GP crashes. They are brand new laptops (Win 11 Pro 24H2). I've already reset them completely. Here is the Windows Event Viewer:

Faulting application name: PanGPA.exe, version: 6.2.6.838, t

Global protect VPN not connecting via Jio phone network

Global protect VPN not connecting via Jio phone network if connect nothing will accessible if split tunnel configured.

GlobalProtect Prelogon

Hello,

Recently we had the new PANFW migration, together with the GlobalProtect VPN enabled. We are working fine with what has setup. As of our staffs we login to the GP VPN with the corporate computers pre-installed with machine certificates and als

How can I do a staggered roll out of Global Protect

I'm under the impression that if we change the version on our global protect portal, its all or nothing, and every client will attempt to upgrade from the firewall.

We've done this in the past and there's always about a 20% failure rate where we have

Disable services VPN Global Protect, do not uninstall VPN software but still connected to the internet

I'm not an expert in Palo Alto, but while using the Global Protect VPN, I noticed that if I disable the Global Protect services in Task Manager, the VPN disconnects, but my computer can no longer connect to the internet. Additionally, if I want to co

HIP Check reports fail to send to internal gateway following internal gateway certificate change or patching of firewall

Hi all, we've recently had a couple of issues which have caused us to investigate client Global Protect connectivity issues.

The first was off the back of the recent security patching of our firewall HA pair.

The second was after replacing the intern