About jmenon

@raji_toor   see if this helps. https://live.paloaltonetworks.com/t5/Prisma-Access-Articles/GlobalProtect-Implement-Split-Domain-and-Applications/ta-p/316929 ... View more

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html ... View more

Review GlobalProtect License requirements here    https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html ... View more

so we tried internally and found it be working , i suggest you open a tac case so that we can investigate what's happening in your environment    @jmenon wrote: Got it. Investigating ... Will respond with what we find by next week,.   ... View more

Got it. Investigating ... Will respond with what we find by next week,. ... View more

Got it. Thanks for the clarification. Will invsetigate internally so as to what's happening and update the thread.   Another quick question, is this problem only when you are using the Wndows 10 UWP GlobalProtect app ? Meaning if you use the regualr windows GlobalProtect app on a windows 10 device and have the VPN established are you able to access the Windows Store ? ... View more

So what is the issue ? We have customers successfully using the Windows 10 app. Are you referring to the app on Windows Store , https://www.microsoft.com/en-us/store/p/globalprotect/9nblggh6bzl3  or the regular GlobalProtect MSI app for Windows 10 that you download from our support portal or your GlobalProtect Portal.  If you want to know the difference between store app and regular app refer to https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/globalprotect-features/globalprotect-app-for-windows-phone#_91590   The best way to resolve an issue if you are not able to find an answer in the community is to open a support case. ... View more

Check this as well    https://live.paloaltonetworks.com/t5/Integration-Articles/GlobalProtect-One-Time-Password-based-Two-Factor-Authentication/ta-p/155234 ... View more

If you have on-demand connect method with GlobalProtect and have encountered issues with the app not being resillient , for e.g.    1. Does not detect VPN disconnects fast enough and continue to think its connected  2. Drops connection when there is temproray network glitches    then please unicast me or reach out to your palo alto networks account team or support so that we can better understand the concerns/requirements to evaluate future enhancements.   ... View more

@K12PaloAlto wrote: Is there any way to add the auto reconnect funcationality that anyconnect has.  It has happened to me a few times where I have dropped connection on global protect for whatever reason, and the client will still show as connected even though I can no longer reach the remote network.  My local network is still ok and can surf the web.  The anyconnect client on the other hand will reconnect when this happens, and also recognize when it can no longer reach the remote network.  If it happens to me, it will happen to end users. If you set the connect method to user-logon the client will auto reconnect. if the connect method is set to on-demand the client will not auto reconnect for most part. However if the client is still showing as connected even though it is not you will want to open a support case with us and allow our support engineer to investigate the source of disconnect and wrong status ... View more

Since 10.12 is not released yet, GlobalProtect is not officially supported , however give 3.0.3 version of the GlobalProtect a try which is expected to work on mac os 10.12 ... View more

  GlobalProtect Agent 3.1 is released and incorporates some of the UI functional feedback. Snippet from the Release Notes ,  Changes to Default Behavior  When you configure the connect method as on‐demand, the options that are available from the GlobalProtect home panel on Windows and Mac endpoints are now consistent with the options in the notification area (system tray). GlobalProtect now displays the Connect option until the tunnel is fully established and, after successfully connecting, displays the option to Disconnect the tunnel. Previously, you could not toggle between the two options regardless of the connection state. This change does not apply if the connect method is user‐logon or pre‐logon.  To prevent Windows and Mac users from inadvertently locking their accounts by repeatedly clicking Connect from the agent home screen (such as when not seeing an immediate response to their request), after a user initiates a connection request, GlobalProtect now deactivates the button. The button remains grayed‐out until GlobalProtect establishes the connection or identifies a disconnection or connection failure (such as a failure to authenticate). If the connection request is unsuccessful or GlobalProtect does not receive a valid status, the button returns to an active state after 30 seconds. The Rediscover Network option, which is available from the agent menu in the notification area (system tray), also exhibits the same behavior.  On Windows and Mac endpoints, the configuration of the Enable Advanced View option now determines whether the Status and Show Panel options are enabled or disabled (grayed out) in the notification‐area menu for the agent. When Enable Advanced View is set to Yes , GlobalProtect disables the Status option and enables the Show Panel option. When Enable Advanced View is set to No, GlobalProtect enables the Status option and disables the Show Panel option.    When the Show Advanced View option is enabled for Windows and Mac endpoints and a user launches GlobalProtect from either the Start menu (Windows only) or notification area (system tray), the agent now always opens to the Home tab. Previously, the agent could open up to a different tab. This change ensures users always have the same experience every time they launch the app. ... View more

@pmc wrote: Also, Why is it everytime I login to my Windows 10 computer Global Protect decides to pop up with a notification from the system tray telling me I'm disconnected. I know I'm disconnected, I just logged into my computer and didn't attempt to connect to the VPN (I'm using on-demand mode).  This can be configured in App configuration. I.e configure the notifications to be turned on or off.  ... View more

Thanks for all the feedback. Please check out the beta 2 drop of GlobalProtect 3.1.0 app which has few UI functional enhancements. Please sign-up for beta (contact your account team on how to sign up for beta access) to get access to release notes and the beta software ... View more

PS: The intent of this response is not to engage in a conversation of whether the app UI can be improved or not , nor the product roadmap will be discussed in this forum. For product roadmap discussion please engage with your account team to schedule one.   To have constructive discussion curious to understand the issues discussed in this thread.  In an Always On mode user does not interact with the application to connect or disconnect because it happens automatically for the user. The issues raised here for on-demand mode i.e. a pure remote access use case. Lets go through the user workflow , user want to connect to VPN ,  user locates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to connect , the user chooses the connect option , the app will prompt the user to enter credentials and the user gets connected. Now the user does the work that needs to be done. Now the user wants to disconnect from the VPN , the user l ocates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to disconnect , the user chooses the disconnect option and VPN is disonnected.  No reason for the user to open up the app to the home screen in the primary workflow.   Now lets gp through the workflow when the user do open the app to the home screen.   user want to connect to VPN ,  user locates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , the primary action of the user is to connect , the user instead of choosing the connect option  (1 click to connect), say the user chooses to open the app , the app opens to the home screen , the user  enter credentials and the user gets connected , user closes the GlobalProtect app , the user does the work that needs to be done,  Now the user wants to disconnect from the VPN , the user l ocates the GlobalProtect icon from system try and right clicks , the menu options appear with list of options , since the primary action of the user is to disconnect , the user chooses the disconnect option and VPN is disonnected. No reason for the user to open up the app to the home screen in this workflow either.   Will the user try to disonnect from the home panel only during lab/poc/testing , as oppose to day to day regualr user ?           ... View more