GlobalProtect SAML Not working

Hi

We have recently deployed SAML authentication on our existing GP environment and this is working fine on most devices. Currently we are in a migration phase, which means only that the gateway is using SAML and the portal is still using on prem A

Gobalprotect error : Cannot decrypt cookie in MAC

Hello guys,

Customer is currently using the GlobalProtect authentication method linked to Okta SAML in the prism access.

The authentication worked well until yesterday, but it does not work as shown in the attached screenshot from today.

Str

GlobalProtect unable to connect. TLS issue

Hi all,

I just wanted to share something with you all. We are rolling our GlobalProtect to all our users and we came across the following issue with some users.

1.Users can not connect via GlobalProtect or even connect to the web portal.

2. Users a

Message an error has occurred in the script on this page when trying to connect to GlobalProtect

Hello team

When connecting to GlobalProtect VPN for Windows we detect this error "an error has occurred in the script on this page"

We have tried to perform 

1. Clear your Internet cache.
   1. Open the Start menu and search for Control Panel.
   2. Open the Control

GlobalProtect GW redundancy and preemption

Does anyone know if GW preemption can be achieved with GlobalProtect Agent?

Meaning, that we use primary and secondary GW, whereas secondary GW should be used only in case primary is not reachable.

So far, the failover to secondary GW works perfectly

GlobalProtect, Windows 11 and laptop lids

We've had issues running GlobalProtect (5.x and 6.0) on Windows 11, particularly when a person closes the lid of their laptop while they're still connected to the GP gateway. When they wake the laptop up, GP won't connect. They have to reboot the lap

Unable to connect Global Protect VPN

All our users are able to connect to our PA220 using Global Protect VPN except one. We've tried reinstalling the Global Protect client multiple times and also connected successfully using their account from another computer, but it just refuses to wo

Exclude Device from HIP check

Hello,

I have setup a HIP object\profile that does not allow a computer to connect if it does not belong to our domain and it is working as it should.

My question is if there is a way to exclude a device from this HIP check and it would be allowed to c

GlobalProtect license

Dears,

I hope this message finds you well.

I planning to purchase a GlobalProtect license for enterprise and I have some questions:

How much the price per year?

Which license support the HIP?

Is the license per users?

Thanks in advance, 

Unable to authenticate user to GlobalProtect using OpenLDAP

i've configured the LDAP profile, Authentication profile, User-ID Mapping, GP Portal and Gateway.

But when i use a user from the 'mapped-group', the globalprotect gave me 'authentication failed'

Please advice. TQ

Global Protect Portal browser tab name change

Hi Team,

I have query that can I change the browser tab name for global protect, 

Windows365 and GlobalProtect.

We are setting up a Windows365 environment that, obviously, lives in Azure cloud. These machines are access by RDPing into them. Due to some access management controls and the systems not actually living on our network, the Windows365 machines were h

GlobalProtect and AD LogonWorkstations

Hey all,

Recently we noticed that users connecting via GlobalProtect who are restricted to a device when logging on, are failing with a message in the logs "invalid username or password".  In AD the user has the LogonWorkstations property populated r

Global Protect Clientless displaying blank page

I have multiple servers behind a clientless Global Protect VPN Portal and they all work fine apart form the Demisto (Cortex XSOAR) HTTPS, which shows blank page when browsing to it.

The Demisto server works fine when browsing to it directly  and all o

These few advance GP option will affect Split DNS ?

Anyone know if I enable Split DNS at the same time also enable these 3 feature it will affect my Split DNS configuration or not ? It will follow SplitDNS or follow these 3 options ?