Globalprotect traffic translated to port 20077

Hi Team, in our test env I have a firewall with GP config. I would like to NAT the GP traffic to a loopback interface. Original destination port is 50443 and a NAT rule is set up to translate it to 443 (and the dest address as well...)

However, if I

Global Protect VPN client-less web portal local account

Hi,

We have a user who is traveling to a restricted location and will need to connect to our client-less Global Protect Web Portal using a local account. Is there a way to have this one user change their password after successful initial login to our

GP Agent Machine Certificate Check

Hello,

I am trying to find out more information about a GP portal setting called Machine Certificate Check under Portal Configuration / Agent / Agent Config / Config Selection Criteria / Device Checks. I was hoping to use a machine certificate chec

browser certificate prompt when trying to connect with Gp portal

the scenario

NDES server

SCEP certificate profile intune

auto enrolled windows 11 machine with business hello configured

our setup is look for certificates in the machine store and specific OID (registry setting and PA end)

when trying to connect

Unauthorized GP login attempts

Hi All – Just curious on when to get concerned about unauthorized GP login attempts. I’ve had a person from the RU making login attempts on our GP for about a year now. I speculate they are new at this, after a while they learned how to mask the ‘HOS

Duo two factor authentication challenge message not showing in GP Portal

After migrating to PA-1410 from a PA-3200, the Duo 2-FA challenge message stopped showing up on the GP portal page after the initial AD credentials authentication. The functionality is working fine as the textbox for the 2-FA options shows up and pro

Globalprotect - machine/device cert for Portal and Gateway "certificate profiles" - how to best distribute

I have successfully configured a working POC for exactly how I want our users to connect to Globalprotect.

We have a SAML authentication profile configured for both the Portal and Gateway each each with the same certificate profile configured. 

I

Vulnerability Protection for CVE-2024-3400

TL;DR: ensure you are applying Vulnerability Protection to web-browsing traffic hitting your GP portal interface, if you rely on the intrazone-default allow

I was responding to another case of this flu. Even though the best-practice strict VP profi

I cannot select user account to login with GlobalProtect App for Windows

I'm using #Global Protect App for Windows

I was given a user account in the domain of a customer to connect to their VPN using GlobalProtect.

I configured the portal corresponding to the user organization of the customer in Global Protect settings.

W

Automatic deployment of GlobalProtect for Mac via Intune

My Company uses Intune for Mac management, and we are trying to automate as many app deployments as we can. Right now, I am hung up on GlobalProtect. I have already created a line-of-business app using the .pkg provided by Paloalto for GlobalProtect.

GlobalProtect UI rendering on Ubuntu

I'm giving the 6.2 client a spin on Ubuntu 22.04 and when using scaled screen resolution (fractional or otherwise) The UI becomes garbled.

This is also the case for the new popup when deploying client certificates and the user is prompted for a passwo

IOS and Globalprotect using Multifactor authenticator

We are facing a problem on IOS devices related to globalprotect using Multifactor Authenticator with Azure. We tried forming a certificate chain a root certificate and an intermediate certificate.

We added to the root certificate an extra attribute w