Using PAN as a DHCP Server - MAC Addresses are Case Sensitive

Hi everyone,

I'm having an issue trying to tell our account representative that PAN should treat upper-case or lower-case (or even mixed) MAC addresses as one entry.  I say this because I had an entry in our PAN DHCP Server all in lower-case (enter

Using pre-logon user with client certificates, how to force global protect to select a particular certificate and not prompt user?

The issue is that we are about to replace our Issuing Intermediate Root Certificate (IIRC) in our PKI chain with a new one due to expiration on December 15th. Right now we configure laptops we sent out to remote users with the special registry key se

[RFC5746] issue with ssl decryption: openssl3.0 unsafe legacy renegotiation disabled

Since I upgraded to the lastest fedora, all of my python/ansible script failed when they are decrypted by our palo alto ssl outbound policy.

After some diging, fedora 35 was using openssl 1.1.1 and fedora 36 switched to openssl 3.0: https://fedorap

Global Protect SAML with embeded browser issues

Hi 

We have been using SAML with embedded browser and had no issues till last 1 week but recently users are reporting SAML Okta page stuck saying connecting after entering credentials or sometimes before entering credentials. 

I have attached the image

Global Protect SAML Azure timeout

Hi,

I have Global Protect setup to run authentication against Azure SAML.

The users login with their credentials and are prompted with their MFA.

The thing is that there seems to be a timeout timer for this in Global Protect?

I tested that if the

GlobalProtect and Windows Hello for Business

Has anyone successfully implemented Windows Hello for Business with GlobalProtect in a Passwordless configuration. We in the middle of a Passwordless implementation. We are discovering that when you use your Biometric or PIN to authenticate, that Glo

GP on Android - The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect

Hi,

We get an error "The network connection is unreachable or the portal is unresponsive. Check the network connection and reconnect." while connecting to GP with an agent installed on Android device.

The thing is that some Android devices works fine

Filtering by a Azure AD user does not work in Gateway-->Agent-->Client Settings

Hi,

we currently have global protect integrated with Azure MFA using SAML and it works flawless.
https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/palo-alto-networks-globalprotect-tutorial

Now, we would like to offer a different IP

Internal host detection issue

Hello, 

Current setup is a 440 running 10.1.10-h2.

Global Protect version is 6.1.2

I have double and triple checked that it's not a reverse dns issue, following this article:

GlobalProtect app fails to detect Internal Network with Interna... - Know

Globalprotect: Always on doesn't always work after comming out of standby requires refresh.

Hi,  

I have a couple of question about Global Protect Always on.     At this moment my portal and gateway are using SAML authentication and my client is set to Always On and Internal portal detection.

1.  What is best practice around authenticat

Error 128

My Customer facing Error 128 on globalprotect app

Can anyone help me to fix this.

Thank you.

Updating new Poral name (GW) to all existing Global Protect users

Hi,

I already have almost 1500 users using Global Protect VPN Client.
Currently our users are using gateway portal name (Eg :123.vpn.com.)

We have implemented a new cloud VPN gateway (eg abcd.cloudvpn.com) and now we want all users to use the new cloud

Globalprotect not working on Lenovo X13s

HI,

I am trying to use the company-provided GlobalProtect vpn app (version 5.2.11-10) to connect to our VPN. My work laptop is a Lenovo X13s running the Snapdragon (TM) 8cx Gen 3 @ 3.0 GHz 3.00 GHz ARM-based processor.

I set up the VPN with the r

How to Configure a frame-ancestors response header with a list specifying (Global Protect portal)

Hello
I am reviewing that GlobalProtect (vpn.xxxxxx.com and remote.xxxxxx.com) are vulnerable as they do not have a frame-ancestors response header configured.

I want to configure a frame-ancestors response header with a list specifying which URLs can

Best Practices for Global Protect Machine and User Cert Authentication