GlobalProtect authentication with NPS Plugin to Azure MFA problems

Hi,

We have configured GlobalProtect to use NPS Plugin to Azure MFA as primary authentication.

The thing is that it only works every other time, when it doesn't work it says "Radius Timeout".

Any ideas of what could be the problem?

We have tried wi

Globalprotect iOS connect and internet issue

Hello, sir

Globalprotect is set up and in use, but there is a problem in iOS

In Android, it is normally connected and the Internet is connected through the GP, but in iOS, it is connected, but the Internet is not available, and the log value is as fo

Internal/External Gateway User-id

Dear Guys,

I try to configure my global protect portal to connect my clients through external or internal networks.

I configure my agent with internal detection and external parameters.

When i connect in the internal networks, the FW see me in the in

Configure GlobalProtect Pre-Logon using SAML authentication with Azure MFA

Is there a knowledge article for how to configure GlobalProtect with SAML authentication and Azure MFA.  Currently we authenticate using Radius with Azure MFA extension.  Currently we have test configuration with GlobalProtect using SAML authenticati

How to re-prompt authentication login when intregate OKTA when user close window promt login

Hi Expert  ,

I would like to know how to config GP to re-prompt authentication login when user close login prompt (We integrate OKTA)  because we found when user close the GP will connecting alway not prompt again even through will refresh connecti

Need to configure Globalprotect for NSX-T north-south traffic.

Need to configure Globalprotect for NSX-T north-south traffic.

Hi, 

I am looking for documentation of globalprotect VPN with NSX-T manager. Is this configuration possible?

If possible could you anyone help??

Thank you in advance.

Can PAN gateway client config use both IP based split tunneling *and* use domain name exceptions?

When I first set up the client-config a couple of years ago I tried out the name based split tunneling and it didn't seem to work. As I was under the gun I implemented IP based split tunneling but never ran the name based split tunneling issue to gro

SAML authentication with global protect gateway configuration client settings user set to specific

The customer tries to put specific users in the global protect gateway agent and he tries to give a specific IP pool to each user. If the user sets it to any then it's working but if the user sets it to specific then it's not working with SAML integr

Issue using MFA in GlobalProtect )

When connecting with Ironchip (MFA), two-factor authentication is only succesfull if the IP is specified in the gateway. If we use the domain to connect GlobalProtect the MFA is not working.

The client auth is 

HIP Check to check all browser version in host

HIP Checks can check for 4 different types of browsers version at the same time like Chrome, Firefox, Safari, Edge?

Need to Allow user to uninstall Global Protect with a Password

Hi all,

Here i have a requirement to uninstall Global Protect with a password.

i configured the APP Tab as "allow with password"

We entered the right Password, but still its showing Password does not match.

PAN-OS installed in FW 10.1.9 

Can an

GlobaProtec many accound and certificate on linux

Hi,
I have a Linux with 6 users profile , how can I setup Global Protect VPN so that each user will use their own certificate,
Global now sees the user's last imported certificate
Linux 20.04 ltsc
GP 5.3.4