GLOBAL PROTECT login failing intermittently with 2 factor authentication for security groups

We are implementing 2 factor authentication and it is failing intermittently when using security groups in the authentication profile.  When we use "all" in the LDAP tree, it works like a champ.  When we go to a single group, it fails with "user not

GlobalProtect Linux CLI - connect pre-logon

I'm trying to configure my client to automatically connect to the VPN when it is booted.  This should happen before a user logs on.  My shell script in cron is not running @reboot.  The client connects perfectly when run by the user, but not pre-logo

HIP checks for anti-malware and mobiles

We want to enable HIP check on anti-malware for Windows and Mac.

I have configured the HIP objects, Profile, and notifications for no match which is working but two issues.

1. the notification shows when IOS and android mobiles connect.

2. How can I a

Secure Renegotiation Support

Are there any current versions of PAN-OS that support secure renegotiation? If yes, can someone point me to a guide with how to configure it?

Azure AD GlobalProtect Clientless Portal SAML Domain issue

Hi All, I am able to authenticate users against the portal with SAML and Azure AD all good. Since I can't pull groups from Azure I'm using LDAP for the portal and policies also working. The issue is that the user from Azure is coming down to the fire

Does Global Protect support LEEF format on forwarding the log to Qradar

Hi Everyone,

Greeting!!

I have a concern regarding the Global protect log forwarding for forwarding the logs to Qradar SIEM Tool.

The concern is about whether Global Protect support for LEEF Format if it does support i want a document that contains th

Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure.  This is achievable via powershell scripting on all Windows devices.  However,

Global Protect After Prelogin the switch to user is not changing IP networks

We are using machine and user certificates from a windows server 2016 CA. to authenticate when using Global Protect.

• Step one is the prelogin connections and it works as intended.  The IP address is assigned on 10.1.1.0/24 network.
• Once the user logs i

Connect to (2) different PAN environments at the same time

Hello all,

Does Global Protect allow for making two concurrent connections to different environments at the same time?  We have (2) pairs of PAN's in different data centers (on different subnets) and have a need for connecting to both environments at

Global Protect client - Log file size

Hello,

We have just rolled out Global Protect on our workstation & mobile clients, and are starting to run into a bit of a problem.

It seems that on some of the machines, the file : pangps.txt (log file) just keeps on growing.

Now, in itself it's norma

GlobalProtect 5.1.8 couldn't save username & password

I am using globalprotect vpn to my company. I would like to know how to save username & password?

You can save it if you use older version (4.x) but you can't is you upgrade to 5.x.

Windows 10 + GlobalProtect 5.1.8

I could not find out how to save usern

GP connection Error

(T21400)Debug(1158): 06/10/21 17:58:32:971 SPStop is called
(T21400)Debug( 783): 06/10/21 17:58:32:983 PreviousDNSInfo doesn't exist, no need to restore
(T21400)Info ( 552): 06/10/21 17:58:32:983 not call uninstallClientConfig, netSetup=000001EBBD0BF77