About Jatin.Singh

what version of GP are you using, there was a bug in earlier versions of 4 with domain split tunnel. we use IP's instead of domains, works well for both teams and outlook.. ... View more

the connection is lost due to 14 hr login lifetime which is set. Is there any way to override this for a user in split tunnel or any other workarounds which you can suggest just for one user without affecting others? ... View more

@Jatin.Singh, The security rulebase entry denying traffic, as mentioned by @JoergSchuetter, is going to be the option that I would go with. Whenever you need access you can simply remove that entry.  ... View more

@Jatin.Singh, Yes, one user-id can be allocated to multiple IPs. It's looks like you're feeding the authentication through the API?  ... View more

Hi @Jatin.Singh ,   No there is not.   There are several feature requests for something similar.  You might want to check with you local SE to have your vote added the FRs:   FR 5251 - Generate an alert when an imported cert is about to expire FR 6069 - Alert on Pending Certificate Expiration FR 7451 - Certificate Expiry Alerts   Cheers, -Kiwi.   ... View more

are you triggering anything in the threat log ? ... View more

@MP18 @OtakarKlier    Hi.  We have done some troubleshooting on our end host PC and have found some TCP sessions that are continuously being created by our system and therefore sending traffic over the VPN Tunnel and keeping it alive.   The TCP sessions are created, and then they time out.  Then another TCP session is established and also times out.   We are not initiating this traffic and there are no other active processes that are trying to send traffic over the VPN. Could you please see the attached screen shots and tell us how we can change this behavior so that we can effectively test the idle timeout settings on our Palo.  If you require any other information, please let us know.  Thanks   Also what exactly is the difference between  Inactivity Logout and Disconnect on Idle?? Seem to be same      ... View more

Push the templates first, then push the policy   (Also please don't put your subject in all caps, this is a professional forum 😉 ) ... View more

This was raised with the TAC and the following fixed the issue   Action Taken: ------------------ - SSO works fine when we select GP icon as credential provider during the login. - We also made changes to make GP as default credential provider as below. HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\SetGPCPDefault to 1 ... View more