This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About SShnap
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About SShnap
06-01-2023
55Posts
11Likes
1Solution
Jun 01, 2023Last Visited
User
Activity
User
Profile
Latest posts by SShnap
| Subject | Views | Posted |
|---|---|---|
| 846 | 01-20-2023 03:55 PM | |
| 887 | 01-20-2023 02:07 PM | |
| 1277 | 09-01-2022 03:13 PM | |
| 1361 | 08-30-2022 03:44 PM | |
| 1716 | 04-08-2022 09:12 AM | |
| 1754 | 04-07-2022 03:46 PM | |
| 1249 | 03-25-2022 09:20 AM | |
| 1308 | 03-22-2022 01:43 PM | |
| 4298 | 12-17-2020 12:19 PM | |
| 5389 | 06-17-2020 09:31 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-01-2022 03:13 PM | |
| 1 Like | 12-17-2020 12:19 PM | |
| 1 Like | 06-16-2020 08:25 AM | |
| 1 Like | 06-17-2020 08:14 AM | |
| 1 Like | 02-08-2019 11:22 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 9 Likes | |||
| 4 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 3 Likes |
User Badges
Community Statistics
| Member Since | 03-25-2016 04:35 PM |
| Date Last Visited | 06-01-2023 05:02 PM |
| Posts | 55 |
| Total Likes Received | 11 |
01-20-2023
03:55 PM
@Adrian_Jensen We are using On-demand enabled and the option of "allow user to disconnect....." is in allow state.
The SSO option is NO and the PA version is 10.1.8
... View more
01-20-2023
02:07 PM
Hi,
I have number of users that needs to sign out from their account and connect GP with their second account.
The options of sign out or logoff for user is not showing at GP client.
we are using client 5.2.11 and did also testing with 5.2.12 and 6.0.4c26 (which causing strange symbols instead of English).
all the setting are in place:
Allow User to Sign Out from GlobalProtect App - YES
Clear Single Sign-On Credentials on Logout - YES
I tried to disable then and enable again but nothing was change.
you can in the picture the missing options vs. the one that it show.
Thank you for the help.
Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.
... View more
09-01-2022
03:13 PM
1 Kudo
[update]
I noticed that globalprotect is trying to open the links from the welcome popup window and at the same time open them on the default browser.
I found a way to add to the link a command to force the it to be opened in MS-Edge.
microsoft-edge:https://www.google.com
I don't since when it is going like this but this fix works.
... View more
08-30-2022
03:44 PM
Hi, for long period of time we are using global protect welcome screen including url links to web applications.
Those links are for easy access to internal web applications, lately there was a change on the global protect client behavior which cause two authentication windows pop up to show for the end user double authentication.
One in windows security popup with PanGPA.exe and the other in the default internet browser for web application sign in.
Does anyone else facing the same issue with the PanGPA.exe new features?
I'm trying to remove the PanGPA authentication and leave the browser authentication only without success.
Currently we are using GP version 5.2.11 (I also tested it with newer version 5.2.12 or older version 5.2.6 and 5.0.9) doing the same issue of the double authentication windows.
... View more
04-08-2022
09:12 AM
Any update on this issue? still on version 10.1.4H4 IPv6 is all over, ACC and reports although IPv6 is disabled on the firewall
... View more
04-07-2022
03:46 PM
I'm on version 10.1.4H4 and have the same issue with IPv6 showing on all reports how to get rid of this?
... View more
03-25-2022
09:20 AM
Hi, I was able to identify the problem, there was a time gap between the two units of 5min, so it caused the authentication error and the global protect data file to not being updated. hope it will save some others time for finding what the error code -1 means
... View more
03-22-2022
01:43 PM
Hi, something strange start showing, I am using more than two years active-passive firewall with global protect client and clientless portals. suddenly now when I move the traffic to the 2nd firewall the clients are receiving this error code -1. on the 2nd firewall under monitor-log-global protect, I notice some logs of "Success - quarantine - quarantine delete" but we are no using active HIPS only monitor and alert. Once I move back to the 1st firewall everything works fine no error. firewall is in version 10.0.8H4 global protect 5.2.6 thank you all
... View more
12-17-2020
12:19 PM
1 Kudo
@goepfrichb I found another way to do it..... under: Device --> Authentication profile --> enter azure profile --> under Authentication tab --> check the option "Enable Single Logout" this will do the work for logout global protect and azure at the same time
... View more
06-17-2020
09:31 AM
@domari In our case we are using DUO so we user SAML and I'm looking for a way to add SSO for guacamole server. on DUO I don't see the option to add bookmark from their side.
... View more
06-17-2020
08:14 AM
1 Kudo
HI @domari New day new thinking. Found the problem, found wrong configuration on the portal. under global protect portal config --> clientless vpn --> general I put the guacamole server address in the host name instead of the vpn portal address. now it is working fine. I need to see how to use SSO for the guacamole rdp session instead of entering the credential again after the user pressing the guacamole application.
... View more
06-16-2020
12:27 PM
Hi all, Start working with global protect using MFA and try using guacamole for proxy rdp connection. after building the guacamole server (updated one using Guacamole 1.1 on Ubuntu 20.04 ) the server is working on the internal network but when accessing it from outside I get the following message. Access Error: 404 -- Not Found Can't locate document: /guacamole/ The same error I received if I using MFA with SAML or LDAP authentication. tried to use some other links but the same issue exist. anyone familiar with this issue. Thank you.
... View more
06-16-2020
08:25 AM
1 Kudo
Hi There I had the same issue with SAML and LDAP group memberships, I'm using DUO with global protect and my intend was to customize the application based on group memberships. I used @JohnWade solution and under authentication profile I changed username attributes from user.username (as DUO instruction) to <domain>\<username> and it is working great. thank you for the help.
... View more
12-09-2019
10:06 AM
Hi @a.jones According to what you described local site is 192.168.90.228, remote external IP is 85.90.253.239 and destination IP is 10.0.8.82 and you want to NAT the source. 1) you need to include local IP NAT address in proxy ID of the tunnel. 2) Check "Enable NAT Traversal" on the ike gateway advanced options. https://pa.rei.edu/PAN_help/en/wwhelp/wwhimpl/js/html/wwhelp.htm#href=ike-gateway-advanced-options-tab.html#ID0EPCDT 3) create NAT rule with the ipsec tunnel as the destination interface for translating the source. 4) make sure your security policies include the NAT address if you created specific source IP address. I use this source for ipsec tunnel using nat configuration. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClopCAC Good Luck
... View more
02-12-2019
01:45 PM
@gwesson PANOS 9.0 will be great with this and policy optimization. thank you.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-01-2023
05:02 PM
|
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks