What does it mean Stage and Event GlobalProtect Fields?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

What does it mean Stage and Event GlobalProtect Fields?

L0 Member

Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".

Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout, portal-prelogin, portal-getconfig, portal-auth and gateway-auth.

PS: we have not found anything about this into Palo Alto's official doc.

Thanks a lot for help us.

5 REPLIES 5

L7 Applicator

@rennersf 

Please take a look at this part of the GlobalProtect Admin guide and let me know if this helps at all.. 

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-app-log-colle...

 

LIVEcommunity team member
Stay Secure,
Joe
Don't forget to Like items if a post is helpful to you!

Dear @jdelio . I appreciate your help. But it's still not what we're looking for. We need to thoroughly understand each of the GlobalProtect stages and events.

@rennersf 

 

Please check with your SE if he can get you this info.

 

Regards

MP

Help the community: Like helpful comments and mark solutions.

L1 Bithead

This looks like what you are looking for: 
https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/logging-for-globalprotect-i...

Example: 

gateway-tunnel-latency
Indicates GlobalProtect gateway latency provided by a GlobalProtect client. Refer to description for latency reported information, such as Pre-tunnel latency: 10ms or Post-tunnel latency: 1ms

gateway-logout
Indicates a GlobalProtect gateway event for a GlobalProtect client logout.

L1 Bithead

might be few years later but actually I am looking for this answer today in 2024

better put the link here for someone needed.

 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001VA3CAM&lang=en_US%E2%80%A...

HELLO WORLD
  • 4098 Views
  • 5 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!