About pmc

Yes I've got the same problem, and yes it's caused a bunch of problems.    I have a ticket open with TAC regarding it - It's been escalated a few times (They even screen recorded my compuer while replicating the problem for them) and I believe it's got to the development team.    It's definitely an issue that took us a while to figure out.    You've got a couple of options/workarounds until they fix this:   1) Use an older version of globalprotect (doesn't happen with 4.0.8-4 or 3.1.6-19) 2) Turn off the "Collect HIP Data" option on the portal. If you don't have the globalprotect specific license you're not using this feature anyway.  ... View more

All good but I wouldn't recommend using 8.8.8.8 as the monitor IP.    Use your ISP's gateway or at least something on their network rather than relying on Google's Anycast DNS. ... View more

I checked with support on this one:   We have created signature coverage for Cisco Webex Chrome Plugin vulnerability. We are currently awaiting content release. We will contact you with content version, and release date. Once the signature has been released. ... View more

3des is horribly insecure, I would not recommend it.  ... View more

Great, thanks for the update jmenon. It's good to know that the community's voice is being listened to and positive changes are being made. I will test this out shortly.  ... View more

Also, Why is it everytime I login to my Windows 10 computer Global Protect decides to pop up with a notification from the system tray telling me I'm disconnected. I know I'm disconnected, I just logged into my computer and didn't attempt to connect to the VPN (I'm using on-demand mode).  ... View more

This brought down mail for our entire organization. Only SMTP was affected but it left a lot of users unhappy. ... View more

I was just going through some other Global Protect threads and here's someone complaining about the UI in 2014.     Re: Global Protect client issue - really annoying [ New ] Options   ‎01-22-2014 03:42 AM @jmenon - Hi! You've come out to our headquarters before and we've expressed these views to you... honestly I don't need you guys to come out and talk to us, I just need the product to perform and be intuitive for users.   Go copy the CheckPoint Endpoint Connect R73 client if you have to... that VPN client seems to be pretty intuitive for our users and has served us well. Link: https://live.paloaltonetworks.com/t5/General-Topics/Global-Protect-client-issue-really-annoying/td-p/34463/highlight/true/page/2  ... View more

@rbista wrote: You didn't make any points.    Are you replying to me? I'm not sure. I think I've been pretty clear but let me know if there's any points I can be clearer on. ... View more

Jmenon,   Yes I'm strictly talking about the on-demand VPN. We have a 2-factor on-demand setup and don't allow the always on VPN in our network.    From your post:   Lets go through the user workflow , user want to connect to VPN ,  user locates the GlobalProtect icon from system try and right clicks   I have a problem with this very first step. When I ask an end user on a Windows computer to open an application they do the following: Search for a shortcut on the desktop Search the task bar Search the start menu Perform a search It doesn't always happen in this order but none (of my users at least) ever go to the system tray to open an application. Our end users also have many icons in their system tray that they don't know or care about. It's frustrating to try an explain to them to 'find the circle Earth shaped icon and right click.' The system tray icons are now hidden by default in the later versions of Windows so it's bad enough trying to get them to 'click on the arrow in the taskbar to expand the system tray.'    It's just not how the layperson works.    Do you see how frustrating this is when other (Anyconnect) VPN solutions are much cleaner and simpler?   Also, yes, our users will try to open the application to disconnect in day to day regular use.     @jmenon wrote: PS: The intent of this response is not to engage in a conversation of whether the app UI can be improved or not , nor the product roadmap will be discussed in this forum. For product roadmap discussion please engage with your account team to schedule one.   To have constructive discussion curious to understand the issues discussed in this thread.  In an Always On mode user does not interact with the application to connect or disconnect because it happens automatically for the user. The issues raised here for on-demand mode i.e. a pure remote access use case. Lets go through the user workflow , user want to connect to VPN ,  user locates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to connect , the user chooses the connect option , the app will prompt the user to enter credentials and the user gets connected. Now the user does the work that needs to be done. Now the user wants to disconnect from the VPN , the user l ocates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to disconnect , the user chooses the disconnect option and VPN is disonnected.  No reason for the user to open up the app to the home screen in the primary workflow.   Now lets gp through the workflow when the user do open the app to the home screen.   user want to connect to VPN ,  user locates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , the primary action of the user is to connect , the user instead of choosing the connect option  (1 click to connect), say the user chooses to open the app , the app opens to the home screen , the user  enter credentials and the user gets connected , user closes the GlobalProtect app , the user does the work that needs to be done,  Now the user wants to disconnect from the VPN , the user l ocates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to disconnect , the user chooses the disconnect option and VPN is disonnected. No reason for the user to open up the app to the home screen in this workflow either.   Will the user try to disonnect from the home panel only during lab/poc/testing , as oppose to day to day regualr user ?                             ... View more

Glad to see I'm not the only one with these frustrations. I'll try and raise a feature request as well.  ... View more

None really but we're migrating away from our ASA's and would like to replace all ASA functions with our Palo Altos.  ... View more

While I'm still in rant mode here's a few other quirks that are frustrating.   When a user is connected to the VPN the 'Connect' button should be greyed out as they are already connected:     People often get confused as most applications have a UI that conforms to this. People will see the connect button still clickable and keep trying to connect rather than looking at the status window below.    Ways to improve this: When the VPN is connected grey it out. Get rid of the 'Clear' button and change it to 'Disconnect.' A better solution is to change the 'Connect' button to 'Disconnect' when the VPN is active.  Edit - And get rid of the clear button altogether. I don't think there's any need for it.    Another possible issue, I attempted to remove the 'Enable Advanced Mode' option in the PA's client config section and it just displays a blank panel. Anyone know what the use of this panel is for?     Edit - Anyone know how I tag/label this post with Globalprotect? ... View more