Since Migrating to PA-460 PAN-OS 10.1.3, SMS-message-based multi-factor authentication (MFA) did not display a prompt to enter the authentication code

Since Migrating to PA-460 PAN-OS 10.1.3, from PA-3020 PA-OS 9.1....... SMS-message-based multi-factor authentication (MFA) did not display a prompt to enter the authentication code.  

PA-3020 with PAN OS 9.1 

Firewall forwards incoming Global Protect a

GlobalProtect SSL error

(P19520-T11728)Dump (1338): 02/09/22 16:16:12:010 SSL_connect: initialization (P19520-T11728)Dump (1338): 02/09/22 16:16:12:010 SSL_connect: write client hello A (P19520-T11728)Dump (1355): 02/09/22 16:16:12:059 SSL_connect:error in SSLv2/v3 read ser...

Possible DNS Issue after GlobalProtect upgrade

Our GlobalProtect firewalls are running version 8.1.15 and another 9.1.4. We allow Split Tunnel, and one firewall has a 0.0.0.0/0 Include Access Route, and the other does not.  Both don’t have any Excluded routes. The one firewall (9.1.4) does have a

What's stored in the GlobalProtect encrypted cookie on the endpoint?

Global Protect traditional and ADEM

Is Global protect without Prisma ever going to get anything related to what ADEM does for prisma?   Would be super nice if some of the features would report back to local FW, or even just hold some information on the client for troubleshooting purpos

Multiple Gateways needed due to SAML

Hello folks!

Whenever this question is posed, the response is always a question: "Why do you want multiple gateways on the same firewall?". 

Customer wants to use SAML Idp (Azure MFA) which is fine unless you need a fallback authentication profile sinc

Different IP on the same GP portal

Hello Guys, 

I would like to ask if it's possible to move the GP portal to another IP so I can issue a third party certificate for the portal without messing with the original public IP that I have for the GW and Portal. If possible, how could I ac

Incomplete network connection with Global Protect Over Public WiFi

Hi Everyone

One of our user is experiencing the issue with GlobalProtect. When the user connect with globalprotect over public WiFi, he can only ping the LDAP server in the network and nothing else. I am wondering what can cause this issue and why the