This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Globalprotect Portal not generating cookie after login

Hi everyone,i ran over an cookie generation issue with my GlobalProtect Portal.To minimize login requests we are generating Authentication override cookies on the portal side and set the lifetime on the gateway side to 5 minutes.The first time i connect to the portal (windows client) the cookie is issued and logged in gp logs 'portal-gen-cookie'...

Is it possible to have 2 portals and 2 gateways, each for different "VPN" connectivity and users?

Hi, hoping someone can guide me. I am trying to see if it's possible to have, basically, 2 VPN's on the same firewall. One portal/gateway would be for employees using radius/AD/DUO authentication and the new one would be for consultants. Same authentication methods although the consultants would be in a different AD group for auth/DUO. Basically...

Gateway certificate issue on Android Globalprotect

I've currently got a support case open for this, but I'm trying to see if other users are having the same issue. From what I've seen: 6.1.11 - No issue 6.1.12 - No issue 6.1.13 - Issue Occurs 6.1.14 - Issue Occurs (current version on Play Store) The issue seems to be that the client doesn't trust the certificate for the gateway. I'm not s...

jsalmans by • L4 Transporter
  • 439 Views
  • 6 replies
  • 0 Likes

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive. The global protect logs doesn't show any errors but users are facing difficulties connecting to the global protect VPN.

Why is Connect Before Logon hidden behind a manual PanGPS -registerplap command?

Can someone at PAN explain the design decision here? The GlobalProtect portal exposes an impressive collection of settings—some useful, some spectacularly niche. The MSI also accepts enough properties to make deployment engineering its own part-time job. Yet enabling Connect Before Logon/PLAP somehow requires administrators to run this separat...

Resolved! Wrapped around the axle - iOS + GP + Client Certificate generated on the Palo

I’ve got an iPad that has the GlobalProtect client installed. I’ve created self-signed certs using the PA 440 as the CA for the client auth, to enable MFA (user+pass & cert). I get this error “A valid client certificate is required for authentication. If the issue persists, contact your system administrator”. I’ve been troubleshooting ...

IMG_0623.jpeg
IMG_0620.png
IMG_0619.jpeg
IMG_0617.png

Global Protect 6.3.3 Issues

I am on Global Protect Version 6.3.3-1121. I can connect on my Windows Device just fine. On a Mac version 26.6.2 when i try to connect, the client says "you are redirected to an embedded browser to authenticate and connect". It just stays there and never connects

pschaeve by • L0 Member
  • 393 Views
  • 3 replies
  • 1 Likes

Global Protect on Android vs Compliance requirements from Intune

Hello We'd like to use Global Protect on Android (latest Samsung). There devices are managed by Intune in Full Management profile. For Global Protect we use SAML profile with MFA and Conditional Access. All our users have compliance requirements (by conditional access policies) to use SAML only on compliant devices. Global protect cannot bypass ...

Managing GlobalProtect Through SOTI MobiControl - Android

We are trying to manage GlobalProtect through SOTI MobiControl by locking down the portal address. I have the Managed App Config enabled in MobiControl with the portal address defined which does lockdown the portal address field in the settings. The issue is when there is an error connecting to the portal address for whatever reason, GlobalProte...

ernestogutierrez_0-1787867782268.png

Unable to Connect to Global Protect 6.3.4 iPhone and iPads

Hello everyone, We're experiencing an issue with GlobalProtect on managed iPads and iPhones version 6.3.4-23. I'm trying to determine whether anyone else has run into this recently. Environment GlobalProtect VPN deployed via Microsoft Intune iPadOS devices Authentication through PingID (SAML) VPN type: Palo Alto Networks GlobalProtect Authent...

mtruong_0-1787151999535.png
mtruong_1-1787152104165.png
mtruong by • L0 Member
  • 220 Views
  • 1 replies
  • 0 Likes

Firewall Bios update after activating a new GlobalProtect version

Ran into an oddity today, and I'm not sure if I fully believe support. I upgraded our firewall last week to 12.1.7-h3, all went fine system is running normally. Today I decided to start testing the new version of GlobalProtect (6.3.3-h11). When activating it, it asked if I wanted to do a system health report. Seemed kind of weird, would expe...

PatWruk by • L1 Bithead
  • 186 Views
  • 0 replies
  • 0 Likes

Always on and user MFA

Trying to configure Global Protect on new firewalls and update the MFA Current configuration:Clients configured w/always connected. Portal is configured w/pre-login device certificates from internal PKI. GW is configured w/LDAP and RADUIS. When a user tunnel is established, user must push yubikey to complete the config. New Configuration: We...

C.Meisch by • L1 Bithead
  • 115 Views
  • 0 replies
  • 0 Likes
  • 1705 Posts
  • 68 Subscriptions
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks