Resource List: GlobalProtect Configuring and Troubleshooting

Resource List: GlobalProtect Configuring and Troubleshooting

Created On 09/25/18 19:50 PM - Last Modified 01/03/24 18:22 PM


Resource List: GlobalProtect Configuring and Troubleshooting


  • GlobalProtect (GP)
  • Any PAN-OS


 Click on the Links to go directly to the articles related to

GlobalProtect Portal
GlobalProtect Gateway
GlobalProtect Client
Split Tunneling
Clientless VPN 
LIVEcommunity - Discussion of the Week (DOTW)
Articles related to GlobalProtect Portal
How to configure GlobalProtect portal page to be accessed on any port
How to Add a Company Logo on the GlobalProtect Portal Login Page
How to enable or disable the Advanced View tabs in the GlobalProtect App user interface?
How to enable/disable Rediscover Network (i.e. Refresh Connection) option on GlobalProtect App? 
Running GlobalProtect on an IP Address Other than the One Configured on Interface
GlobalProtect Agent Fails With Error "This Site Can't Be Reached"
Blocking Brute Force Attack on GlobalProtect Portal Page
How to Disable the GlobalProtect Portal Login Page
Global Protect portal using vulnerable jQuery version
How to modify GlobalProtect app refresh timer?
Commit Validation Error: GlobalProtect
Global Protect Enforcer Exception List
GlobalProtect App Dynamic Configuration misses information for 'show-system-tray-notifications' Commit Warnings
How To Invalidate Previously Issued GlobalProtect Authentication Override Cookies
Commit warning: GlobalProtect App Dynamic Configuration misses information for 'show-system-tray-notifications'.
How do I select which ciphers are used in the GlobalProtect connection negotiation?
GlobalProtect failed to connect - required client certificate is not found
How to Run a Report for Previous Logged in GlobalProtect Users
How to enable/disable Advanced View tabs in GlobalProtect App user interface?
GlobalProtect Portal Client Config on Transparent Mode - Agents are Not Upgrading Automatically
GP GlobalProtect Client Tries to Connect Automatically upon Reboot/Service Restart 
How to Access the WebGUI when GlobalProtect Is Enabled
How to Enable the Disable Option for GlobalProtect Client
Does GlobalProtect Require Interface Management Profiles with HTTPS to Function?
View and Install GlobalProtect through the CLI
Missing Password Field That Allows User to Uninstall GlobalProtect App
Globalprotect fails with "connection failure" when changing GP Portal while using SSO
Tunnel traffic does not go through a proxy when enforcement is enabled
Articles related to GlobalProtect Gateway
How to fix GlobalProtect error message "Assign Private IP address failed"
What Encryption Is Used When Enabling IPSec for GlobalProtect?
Why does the IP address range assigned from GlobalProtect gets subdivided into smaller subnets on the firewall routing table
How to check if endpoints has tunnel connection to the gateway in GlobalProtect Pre-Logon
How to List Current or Previously Connected GlobalProtect Users
How to Disable Access to Local Resources when using GlobalProtect
When performing a Commit/Validate the warning is shown "tunnel tunnel.x ipv6 is not enabled"
What is the maximum number of configurable GlobalProtect Client IP pools?
GlobalProtect client upgrades failing to complete.
limitation on GlobalProtect Include/Exclude Client Application Process Name
Is there a way to change the tunnel keepalive timeout on GlobalProtect?
What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?
Failed Connection to a GlobalProtect VPN via a Linux Endpoint
Assigning an Interface with a DHCP IP Address as the Portal/Gateway GlobalProtect IP
How to remove the commit warning message, "does not have 'enable-user-identification' turned on for globalprotect gateway"
GlobalProtect not redirecting to Captive Portal after inbound authentication from MFA Gateway
GlobalProtect: Disable Local Subnet Access
What is the GlobalProtect Gateway Selection Process?
Why Does a Local Client Device Break RDP Connection to Cloud-VM Platform when Connecting to a GlobalProtect Gateway?
Existing GlobalProtect user is logged out forcibly when another user logs in with same combination of User name and Computer name
GlobalProtect: IP Address Assignment When Having More Than One IP Pool
Unable to download GlobalProtect data file
GlobalProtect Client Settings - Number of entries limitation
iPads and iPhones Not Able to Connect Using GlobalProtect
GlobalProtect Users and Internal Resources
How to redistribute GlobalProtect routes into OSPF
Article Related to GlobalProtect Client
Download and Install the GlobalProtect App (Windows / Mac / Linux / iOS / Android / IoT)
How to Download the GlobalProtect from the Customer Support Portal
How to upgrade - GlobalProtect agent upgrade process
Is Global Protect Agent supported on Windows Surface Pro with ARM processor?
After Installing GlobalProtect App On macOS Catalina, why does the user receive Popups requesting For Access To Local Folders When Attempting To Connect
GlobalProtect Error During Installation: An instance of GlobalProtect is already present on the system
How to Disable the Troubleshooting tab on the GlobalProtect Client
How to Confirm if GlobalProtect Tunnel is Using IPSec or SSL?
What happens if my GlobalProtect's gateway route is removed?
GlobalProtect App prompts the user for user name and password on a mobile device
How to resolve "Portal Error. Check version failed"
How to change MTU on PANGP Virtual Adapter used by GlobalProtect App
Error Message: "System Extension Blocked" Seen on MacOS Endpoints During GlobalProtect Installation
GlobalProtect Client is Not Connecting
How to Collect Logs from GlobalProtect Clients
Why we are seeing "WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12002 " in the GlobalProtect Logs?
Error: Failed to find PANGP virtual adapter interface when connecting to GlobalProtect
Using Active Directory GPO to install the GlobalProtect client
GlobalProtect Agent on Linux CentOS cannot connect to GlobalProtect Gateway
Connection Failed: Failed to get default route entry
How to change MTU on PANGP Virtual Adapter used by GlobalProtect App?
Under which conditions can users see the Sign Out button within the GlobalProtect app?
GlobalProtect Agent is stuck at the Connecting stage on macOS
How to uninstall GlobalProtect without user intervention?
Connect button in the Option List of GlobalProtect Agent inactive after Portal IP address change
GlobalProtect Client Installing in Wrong Directory
How to upgrade the GlobalProtect Client in PAN-OS 9.0
Why GlobalProtect Credential Provider (CP) is the default sign-in option just after the GlobalProtect Install
Knowledge: How to configure Windows 10 to be able to access modern apps such as Microsoft Company Portal when connected thru GlobalProtect VPN
How to download and install GlobalProtect on Android OS from Google Play Store
How to download and install GlobalProtect on Apple iOS from App Store
How to Install a Client Certificate for Global Protect on a Linux Machine (Ubuntu)
A solution for Global Protect Connection Issues on MacOS Clients
GlobalProtect Agent Fails to Connect with Error Code 10056
Why Do Windows Users Getting Digital Signed Driver Error When Attempting to Install GlobalProtect
How to set a preferred gateway on the GlobalProtect App on Client Machine
Why am I seeing Global Protect prompt a pop-up asking to Filter Network Content on MacOSx Catalina
Office 365 Sign In Fails Over GlobalProtect
Where are the UserID and Password Stored for GlobalProtect Client?
GlobalProtect Agent (App) Directory Structure on Apple MacOS
GlobalProtect: PanGPS or/and GlobalProtect processes not starting on macOS (OR launchctl is not able to load pangps or pangpa)
How to Export Logs from GlobalProtect App on iOS or Android
Does GlobalProtect client for Windows Need WMI Service Enabled?
GlobalProtect Client Installation Fails Because mfc120.dll Was Not Found
How to add Multiple portals to Globalprotect client via windows registry
macOS X 10.13 & iOS 11 - New Requirements for GlobalProtect Connections
GlobalProtect Client Unable to Connect on Newly Installed Machine
GlobalProtect Agent error Cannot connect to service, error: 10022
Connect Linux Machine to GlobalProtect
GlobalProtect Client Installation Error Due to Corrupt Cabinet File
How does the GlobalProtect Client get a New Configuration? 
How to add multiple portals after a fresh GlobalProtect app installation on Windows?
Changing GlobalProtect Client Language
GlobalProtect Agent Prelogon Failing Even After Importing Private PKI Certificates
How to uninstall GlobalProtect without user intervention?
GlobalProtect Client on Mac Keeps Reconnecting
GlobalProtect Windows App cannot resolve local network's domain names
Embedded browser for SAML authentication was not displayed on attempts of connection to the gateway after cookie expiration
Can a Common Acces Card authentication used for GlobalProtect User Logon (Always On)?
GlobalProtect popup saying "Your Global Protect Session has been disconnected due to network connectivity issues or session timeout"
Articles related to HIP
How Does the HIP Mechanism Work in GlobalProtect? 
How to Configure HIP for Missing Microsoft Patches
How to Configure GlobalProtect for Custom Registry Check on Windows
How to Troubleshoot HIP Match issues
What are the approved Antivirus vendors for GlobalProtect HIP objects?
GlobalProtect HIP check fails to detect Cybereason Anti-Malware on Linux

HIP check failures cause GlobalProtect tunnel to disconnect after 3 hours

Articles related to Authentication
How to Configure AD authentication for GlobalProtect Users to Login With both "Domain\Username" and Just "Username" Format
How to configure GlobalProtect for authentication using only certificates
GlobalProtect login fails when using a group in the allow list
How To Configure Global protect App 5.0 on Apple iOS 12 to use Client certificate for authentication.
Different SAML Profiles needed for Primary and Secondary devices in HA
How to resolved the Authentication failed because of "rad_access_reject"?
GlobalProtect Client Using RADIUS Two Factor Authentication (2FA) not Hitting the Security Rule
How to configure GlobalProtect with Certificate Only Authentication in PAN-OS 9.0?
GP users are not restricted to an AD group in allow list of authentication profile.
GlobalProtect App prompts user for user name and password on mobile device
Global Protect Authentication Timing Out Before Configured Radius Server Timeout
GlobalProtect client on iPhone or iPad unable to connect when using SAML authentication
SAML With GlobalProtect Application Doesn't Prompt For Selection Of Second Factor Authentication
USB devices disconnected after connecting to Global Protect
Active Directory Password Changes using GlobalProtect
How to generate cookies on GlobalProtect Portal and use cookies for Gateway Authentication
Why GlobalProtect authentication request is not sent to the next server listed in a radius server profile
How to configure Active Directory Authentication for GlobalProtect users to login with domain\username and just username format 
Single Sign-On (SSO) login prompt not seen during GlobalProtect client authentication while using SAML authentication
Password Expiry Warning on the GlobalProtect Client
GlobalProtect LDAP Authentication Fails
GlobalProtect Users Unable to Authenticate when Using Kerberos 
GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping
How SAML Authentication works with GlobalProtect SSO
OTP is prompted twice for GlobalProtect configured with two factor authentication
Articles related to Split Tunneling
GlobalProtect: Split Domain & Applications and Exclude Video Traffic Features - Troubleshooting Tips
How to exclude Netflix from the Global Protect split tunnel 
Can we use ping to test domain split tunneling in Globalprotect?

Log collection for macOS split-tunneling issues

Log collection for split-tunneling issues on Windows clients

Domain split tunnel and Split DNS behavior with DoH\DoT
Articles related to Clientless VPN
How to Troubleshoot Global Protect Clientless VPN
How to Gather Fiddler pcaps for Clientless VPN Application Based Issues
Application web pages are not loading properly when accessed through Clientless VPN.
Enabling RDP access to Citrix environment through GlobalProtect Clientless VPN 
Articles related to LSVPN
Why does the tunnel start bouncing when LSVPN is created with no access route on the Gateway?
How to view tunnel flow details for a 'GlobalProtect-site-to-site' LSVPN from the GlobalProtect Satellite
How to Configure GlobalProtect Satellite
GlobalProtect Satellite Not Receiving Newly Added Access Route from the Gateway
Articles related to GlobalProtect Configuration
How to configure GlobalProtect
Video Tutorial: How to Configure GlobalProtect on PAN Firewall
Basic GlobalProtect Configuration with Pre-logon
Basic GlobalProtect Configuration with User-logon
Basic GlobalProtect Configuration with On-Demand
How to Configure GlobalProtect Portal with Client Cert Authentication and Certificate Profile
How to Configure GlobalProtect SSO with Pre-Logon Access using Self-Signed Certificates
How to Configure Internal GlobalProtect Only
How to Configure DNS Proxy for GlobalProtect Clients
GlobalProtect: Implement Split Domain, Applications, Exclude Video Traffic Configuration
How to configure a GlobalProtect client to get the same IP address
GlobalProtect Clientless VPN SAML SSO with Okta
Exclude Domains From GlobalProtect Tunnel
How to Configure GlobalProtect using Pre-Logon in PAN-OS 9.0
How to Configure Global Protect Gateway on Loopback Interface with iPhone Access 
How to configure a dual ISP network with GlobalProtect VPN using a virtual router and Policy-Based Forwarding
Access Route based Split Tunneling for VPNC Client on Linux Distributions
GlobalProtect: Optimizing Office 365 Traffic
Okta/Palo Alto Networks SAML Integration
Registry Setting when Deploying GlobalProtect Client with Microsoft Group Policy Object


Articles related to GlobalProtect Certificates
How to generate a CSR (Certificate Signing Request) and import the signed certificate
How to generate a new self-signed SSL certificate
Certificate config for GlobalProtect - (SSL/TLS, Client cert profiles, client/machine cert)
Can we use the same certificate for Global Protect Gateway and Portal?
How to install a chained certificate signed by a public CA
How to configure certificates for multiple gateways managed by a single portal for GlobalProtect
Some Linux clients are not able to connect to GlobalProtect after May 30 2020 if GP certificate is signed by Expired AddTrust CA
How to create subordinate CA certificates with Microsoft certificate server
How To Configure GlobalProtect VPN Using An External Root CA
How to import Global protect portal cert that is renewed by Godaddy 
GlobalProtect Auth Fails When Client Cert Has Special Character in Subject (common-name)
How to Use a Wildcard SSL Cert with Subject Alternative Names for GlobalProtect Portal/Gateway
Controlling GlobalProtect VPN Access with OCSP
How to Issue Certificates to GlobalProtect Devices
Disabling weak ciphers for web GUI access is not working
Articles related to GlobalProtect Troubleshooting
Common Issues with GlobalProtect
GlobalProtect Client Fails to Connect Intermittently
What Steps Can be Taken to Increase GlobalProtect Performance Due to Increased Number of Connections?
Troubleshooting GlobalProtect
Useful GlobalProtect CLI commands
How to troubleshoot when Global protect gateway tunnel get disconnected due to" keep-alive timeout"
How to detect when Global Protect client fails to establish IPSec VPN tunnel with the GP Gateway
GlobalProtect Agent (App) Directory Structure on Microsoft Windows
GlobalProtect agent fails to connect and shows "Invalid portal" after the user logs in to an endpoint.
Where is the GlobalProtect Log File Located?
Why is GlobalProtect Slower on SSL VPN Compared to IPsec VPN?
GlobalProtect Client Issues with Multiple ISPs 
GlobalProtect Client Stuck at Connecting when Workstation is on the Local Network
How to Find GlobalProtect Agent Installation Issues on Windows
GlobalProtect app on Android 6.0+ cannot establish VPN connection using IP address
Using the GlobalProtect Client After Disabling a Proxy Server
How to Open a Case on GlobalProtect Remote User VPN Connection Issues
Troubleshooting GlobalProtect MTU Issues
All Other Articles related to GlobalProtect
Is There a Limit to Maximum Number of Gateways for GlobalProtect?
How to Activate Trial Licenses
Which IP is Used for User-IP Mapping when Internal GlobalProtect is Configured and Multiple NIC Cards are Enabled?
Connection to GlobalProtect is failing with error "You are not authorized to connect to GlobalProtect Portal"
Connection to GlobalProtect is Failing with Error "Matching client config not found"
LIVEcommunity Discussions of the Week (DOTW)
DOTW: Aged out Session End in Allowed Traffic Logs
DOTW: TCP Resets from Client and Server aka TCP-RST-FROM-CLIENT
DOTW: Palo Alto Networks Compatibility Matrix
DOTW: GlobalProtect and Static IP
DOTW: Multiple GlobalProtect Portals and Gateways
DOTW: MFA and 2FA for GlobalProtect and Next-Generation Firewall
DOTW: GlobalProtect Troubleshooting Tips
DOTW: GlobalProtect and Upgrade to MacOS Catalina Issue

Additional Information

For more content on GlobalProtect, please explore the following resources:

  • Print
  • Copy Link

Choose Language