Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".
Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout, portal-prelogin, portal-getconfig, portal-auth and gateway-auth.
PS: we have not found anything about this into Palo Alto's official doc.
Thanks a lot for help us.
Please take a look at this part of the GlobalProtect Admin guide and let me know if this helps at all..
This looks like what you are looking for:
Indicates GlobalProtect gateway latency provided by a GlobalProtect client. Refer to description for latency reported information, such as Pre-tunnel latency: 10ms or Post-tunnel latency: 1ms
Indicates a GlobalProtect gateway event for a GlobalProtect client logout.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!