- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
How do we create a secure and seamless end-user experience for GlobalProtect deployments? Learn best practices during this interactive event, happening Tuesday, July 6 at 8 a.m. PDT.
In this live event, we’ll cover:
Join us to exchange experiences, as well as best practices in securing and enabling a seamless remote workforce experience for GlobalProtect deployments.
Nehal Naik—@nnaik
Nehal Naik is a Product Manager responsible for GlobalProtect at Palo Alto Networks. Nehal has a diverse background, with more than 10 years of experience spanning product management, technical marketing, engineering and services in network and security technologies in companies such as Cisco and Rackspace. Nehal holds a master’s in Security Engineering and is an active CISSP.
Varun Ramesh Athreya—@vathreya
Varun Ramesh Athreya is a Product Manager in the GlobalProtect team. He has more than five years experience in Product Management, and has worked on OS, Mobile, and Web App products in different stages of the product lifecycle. He has previously been a PM for Identity, Platform Security, Integrations, and User Experience domains.
(A recording of the event will be available after the event has concluded.)
Just a reminder, if you have any questions, you can post them here to be answered during the event OR you can use the online chat in the event.
We will also update this area with all recording information once the event is complete.
Hi Team,
While using GP 5.2.7 using split tunnel on PAN OS 9.1.6 any issues with slowness while accessing internal sites or Internet when IPV6 is enabled?
In our environment few users reported this so Wanna check here if it is known issue or not?
Regards
Yea it is a issue, we have the same problem and have a ticket open with engineering open since Jan. The issue is the client is trying to use IPv6 DNS over v4 and with GP the IPv6 DNS fails and the slowness seen is the timeout the client has before trying v5
@jmerchak do you participate in the Beta? Maybe something like that can be fixed better in a new version (as you already since 6 months "fight" with TAC for that) ...
Its not, been testing beta versions. 😞
Currently an IPv4 address is used on the gateway and also in the global protect tunnel and the settings "enforce global protect for network access" and "disable local lan access", but it is still possible to access ressources in the local subnet over IPv6 like a local printer or a NAS. How is it possible to prevent access to a local subnet or even more over IPv6 and really force everything to be routed over the global protect vpn tunnel?
PAN GPS Agent Logs
There is lot of Noise in the GPS logs.
While searching Agent for GPS logs of user connection what is the best search filter we can use to find connection issues?
For everyone who also has this "issue", please vote for feature request 17108 - Ability to block direct IPv6 access to local network