Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- 5G
- IoT Security
- Prisma SD-WAN
Network Security
- Prisma Access
- Prisma SaaS
- Prisma Cloud
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
- LIVEcommunity
- ›
- About vathreya
About vathreya
Announcements
The LIVEcommunity is undergoing maintenance. You may experience delays. Learn more here.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a week ago
59Posts
6Likes
7Solutions
Apr 13, 2021Last Visited
User
Activity
User
Profile
Latest posts by vathreya
| Subject | Views | Posted |
|---|---|---|
| 566 | 03-03-2021 09:14 AM | |
| 370 | 02-23-2021 09:52 AM | |
| 238 | 02-10-2021 04:19 PM | |
| 261 | 02-10-2021 04:02 PM | |
| 188 | 02-10-2021 03:21 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 03-03-2021 09:14 AM | |
| 1 | 02-10-2021 01:08 PM | |
| 3 | 02-09-2021 01:28 PM | |
| 1 | 05-04-2020 09:52 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 7 |
My Knowledge Base Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 |
User Badges
Public Statistics
| Date Registered | 10-03-2019 04:26 PM |
| Date Last Visited | a week ago |
| Total Messages Posted | 66 |
| Total Likes Received | 6 |
09-16-2020
10:15 PM
Enable Cookie Authentication where Portal generates the cookie and gateway accepts the cookie or you can let portal generate and accept, and gateway accept as well. Use of Authentication cookie prevents typing in credentials (within the auth cookie timeout period).
... View more
08-18-2020
05:25 PM
@NavigantNetworkteam Please refer the following document for determining the precedence order while using split-tunnel rules. https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/globalprotect-gateways/split-tunnel-traffic-on-globalprotect-gateways.html Regards, Varun
... View more
07-29-2020
04:02 PM
Updating the logo on the GlobalProtect application is currently not supported.
... View more
07-04-2020
07:08 AM
Found a solution. When I added satellite tunnel and allowing authentication from local auth or certificate, the issue went away.
... View more
06-16-2020
03:50 AM
After raising a case with Support we have found out that this is the default behavour when a single app is configured.
... View more
05-29-2020
07:57 AM
Is updating allowed in your user agent config? Go to your portal > Agent > your agent config > App and make sure that the Allow User to Upgrade GlobalProtect App setting is configured to an Allow option. Also, I can't find any documentation to support this, but I'm wondering if the jump from version 4.1 to version 5.1 isn't supported through automatic updates.
... View more
05-22-2020
02:12 AM
Dear Vathreya Thank you for the reply, yes we added the IPAD UDID into the Common Name in the certificate, but it seems like in GP for IOS in version 5.0, the client isnt able any longer to grap the UDID straight from the IPAD, but needs to be specific configured via VPN profile to map the UDID with Mobile-ID in order to get the correct information sent in the HIP report to the gateway. https://docs.paloaltonetworks.com/globalprotect/5-0/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/globalprotect-app-for-ios-user-experience-enhancements/mobile-device-management-changes.html#ide03e60d2-363a-4cec-9fb4-65e65bbb011f_id9b855032-eda8-4143-9da8-b66e22293559 Our MDM platform used is Intunes and so far we havent been able to find the ability to perform such a customization of the VPN profile. I missed to include information in the orginal post that it was issue with IPAD's
... View more
05-18-2020
04:41 AM
Looks like more of DNS related issue ? client able to resolve dns name of portal ?
... View more
05-18-2020
04:38 AM
your global protect portal using public cert ? Make sure root certificate is installed correctly on client PC. Check for logs on global protect client.
... View more
05-14-2020
11:34 AM
Does this help? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJRCA0 It displays a welcome page when portal login is successful. Also, can you specify what you're trying to communicate to your end-users in this welcome page/banner? Regards, Varun
... View more
05-08-2020
10:04 PM
I ran into this issue once SIP was issued on March 15th and most employees started to work from home. Although we had domains such as *.zoom.us, youtube.com, 8x8 etc defined in GP to NOT use the tunnel, traffic kept accessing via the tunnel even though configuration was correct . We are on Pan0S 9.0.5. I spent several days with support. When we switched from using domain names to IP address ranges the issue went away. This issue was not DNS related as internally we use the same DNS servers VPN clients use and internally we had no issues resolving DNS. Fix was to use IP addresses in the split-tunnel config until PAN figures out the bug.
... View more
05-04-2020
09:52 AM
1 Kudo
Logout is always best effort. Client tries to send the log out event but it may not reach the server due to network changes etc. Client will tear down the tunnel but the gateway may not know. It is then torn down on the timeout specified on the firewall.
... View more
04-21-2020
04:32 PM
Hi, Pre-logon tunnel setup is currently not supported on linux. Regards, varun
... View more
04-21-2020
01:21 PM
I configured the portal to use LDAP authentication and set "remember username". Configured gateway to use RADIUS authentication thus satisfying MFA requirement. but I'm running into an issue where GP is not prompting the user for portal authentication after the user logout and retries in some time. He is just being prompted for gateway authentication. How can I resolve this?
... View more
04-21-2020
10:00 AM
I've posted this on a couple forums now, and it seems like this is an issue regardless of which VPN solution you use. That option to register this connection's address in DNS is a default option in our Windows 10 image. We got around it by looking up the GP IP for the user, edit our hosts file entry with the GP IP and the FQDN, and then issuing the following commands to remotely connect to the computer and uncheck that DNS option. We eventually put this into a script, and now a GPO. #Connect remotely to multiple computers using admin Account Enter-PSSession –ComputerName mycomputername –Credential domain\username #Check to see if DNS registry option is checked Get-NetAdapter Ethernet | Get-DNSClient Get-NetAdapter Wi-Fi | Get-DNSClient #Sets the DNS Registry option on Ethernet interface to False (turns off) Get-NetAdapter Ethernet | Set-DNSClient –RegisterThisConnectionsAddress $False Get-NetAdapter Wi-Fi| Set-DNSClient –RegisterThisConnectionsAddress $False #Force ipconfig /registerdns Register-DnsClient
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a week ago
|
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
