2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?

id=kA10g000000ClfXCAS

Resource List: GlobalProtect Configuring and Troubleshooting

Created On 09/25/18 19:50 PM - Last Modified 06/23/22
22:13 PM

GlobalProtect Agent GlobalProtect App

GlobalProtect Gateway GlobalProtect Portal Licensing

490072
Resource List GlobalProtect
Environment
GlobalProtect (GP)
Any PAN-OS

Resolution
Click on the Links to go directly to the articles related to

GlobalProtect Portal
GlobalProtect Gateway
GlobalProtect Client
HIP
Authentication
Split Tunneling
Clientless VPN
LSVPN
Configuration
Certificates
Troubleshooting
LIVEcommunity - Discussion of the Week (DOTW)

Articles related to GlobalProtect Portal

How to configure GlobalProtect portal page to be accessed on any port
How to Add a Company Logo on the GlobalProtect Portal Login Page
How to enable or disable the Advanced View tabs in the GlobalProtect App user interface?
How to enable/disable Rediscover Network (i.e. Refresh Connection) option on GlobalProtect App?
Running GlobalProtect on an IP Address Other than the One Configured on Interface
GlobalProtect Agent Fails With Error "This Site Can't Be Reached"
Blocking Brute Force Attack on GlobalProtect Portal Page
How to Disable the GlobalProtect Portal Login Page
Global Protect portal using vulnerable jQuery version
How to modify GlobalProtect app refresh timer?
Commit Validation Error: GlobalProtect
Global Protect Enforcer Exception List

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 1/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

GlobalProtect App Dynamic Configuration misses information for 'show-system-tray-notifications' Commit

Warnings
How To Invalidate Previously Issued GlobalProtect Authentication Override Cookies
Commit warning: GlobalProtect App Dynamic Configuration misses information for 'show-system-tray-
notifications'.
How Do I Choose a Cipher to Negotiate (disable or enable ciphers) in GlobalProtect?
GlobalProtect failed to connect - required client certificate is not found
How to Run a Report for Previous Logged in GlobalProtect Users
How to enable/disable Advanced View tabs in GlobalProtect App user interface?
GlobalProtect Portal Client Config on Transparent Mode - Agents are Not Upgrading Automatically
GP GlobalProtect Client Tries to Connect Automatically upon Reboot/Service Restart
How to Access the WebGUI when GlobalProtect Is Enabled
How to Enable the Disable Option for GlobalProtect Client
Does GlobalProtect Require Interface Management Profiles with HTTPS to Function?
View and Install GlobalProtect through the CLI
Missing Password Field That Allows User to Uninstall GlobalProtect App
Articles related to GlobalProtect Gateway
How Can IP Overlaps be Prevented with GlobalProtect
Are you able to configure a /32 subnet for Global Protect clients?
What Encryption Is Used When Enabling IPSec for GlobalProtect?
Why does the IP address range assigned from GlobalProtect gets subdivided into smaller subnets on the
firewall routing table
How to check if endpoints has tunnel connection to the gateway in GlobalProtect Pre-Logon
How to List Current or Previously Connected GlobalProtect Users
How to Disable Access to Local Resources when using GlobalProtect
GlobalProtect Giving a Warning when Commit/Validate: "tunnel tunnel.x ipv6 is not enabled"
What is the maximum number of configurable GlobalProtect Client IP pools?
GlobalProtect client upgrades failing to complete.
limitation on GlobalProtect Include/Exclude Client Application Process Name
Is there a way to change the tunnel keepalive timeout on GlobalProtect?
What is the maximum number of GlobalProtect VPN tunnels supported on Firewall?
Failed Connection to a GlobalProtect VPN via a Linux Endpoint
Assigning an Interface with a DHCP IP Address as the Portal/Gateway GlobalProtect IP
How to remove the commit warning message, "does not have 'enable-user-identification' turned on for
globalprotect gateway"
GlobalProtect not Redirecting to Captive Portal after Inbound Authentication
GlobalProtect: Disable Local Subnet Access
GlobalProtect Gateway Selection Process

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 2/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

Why Does a Local Client Device Break RDP Connection to Cloud-VM Platform when Connecting to a
GlobalProtect Gateway?
Existing GlobalProtect user is logged out forcibly when another user logs in with same combination of User
name and Computer name
GlobalProtect: IP Address Assignment When Having More Than One IP Pool
GlobalProtect Data File
GlobalProtect Client Settings - Number of entries limitation
iPads and iPhones Not Able to Connect Using GlobalProtect
GlobalProtect Users and Internal Resources
Why the "Gateway Name" does not show on GlobalProtect monitor tab?
How to redistribute GlobalProtect routes into OSPF
Article Related to GlobalProtect Client
Download and Install the GlobalProtect App (Windows / Mac / Linux / iOS / Android / IoT)
How to Download the GlobalProtect from the Customer Support Portal
How to upgrade - GlobalProtect agent upgrade process
Is Global Protect Agent supported on Windows Surface Pro with ARM processor?
After Installing GlobalProtect App On macOS Catalina, why does the user receive Popups requesting For
Access To Local Folders When Attempting To Connect
GlobalProtect Error During Installation: An instance of GlobalProtect is already present on the system
How to Disable the Troubleshooting tab on the GlobalProtect Client
How to Confirm if GlobalProtect Tunnel is Using IPSec or SSL?
What happens if my GlobalProtect's gateway route is removed?
GlobalProtect App prompts the user for user name and password on a mobile device
How to resolved "Portal Error. Check version failed"
How to change MTU on PANGP Virtual Adapter used by GlobalProtect App
Error Message: "System Extension Blocked" Seen on MacOS Endpoints During GlobalProtect Installation
GlobalProtect Client is Not Connecting
How to Collect Logs from GlobalProtect Clients
Why we are seeing "WINHTTP_CALLBACK_STATUS_REQUEST_ERROR, error=12002 " in the GlobalProtect
Logs?
Error: Failed to find PANGP virtual adapter interface when connecting to GlobalProtect
Using active directory GPO to install the GlobalProtect client
GlobalProtect Agent on Linux CentOS cannot connect to GlobalProtect Gateway
Error:Failed to get default route entry
How to change MTU on PANGP Virtual Adapter used by GlobalProtect App?
In which condition users can see username with sign out option under the global protect settings client App?
GlobalProtect Agent Stuck at Connecting Stage on macOS
Single-Sign-On SSO with Windows PC Fingerprint
How to silently uninstall GlobalProtect client

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 3/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

Connect button in the Option List of GlobalProtect Agent inactive after Portal IP address change
Single Sign-On (SSO) for GlobalProtect Fails from Virtualized Systems on VMware Accessed via RDP
GlobalProtect Client Installing in Wrong Directory
How to upgrade the GlobalProtect Client in PAN-OS 9.0
Why GlobalProtect Credential Provider (CP) is the default sign-in option just after the GlobalProtect Install
Knowledge: How to configure Windows 10 to be able to access modern apps such as Microsoft Company Portal
when connected thru GlobalProtect VPN
How to download and install GlobalProtect on Android OS from Google Play Store
How to download and install GlobalProtect on Apple iOS from App Store
How to Install a Client Certificate for Global Protect on a Linux Machine (Ubuntu)
A solution for Global Protect Connection Issues on MacOS Clients
GlobalProtect Agent Fails to Connect with Error Code 10056
Why Do Windows Users Getting Digital Signed Driver Error When Attempting to Install GlobalProtect
How to set a preferred gateway on the GlobalProtect App on Client Machine
Why am I seeing Global Protect prompt a pop-up to Add VPN configuration on MacOSx Catalina
Why am I seeing Global Protect prompt a pop-up asking to Filter Network Content on MacOSx Catalina
Office 365 Sign In Fails Over GlobalProtect
Where are the UserID and Password Stored for GlobalProtect Client?
GlobalProtect Agent (App) Directory Structure on Apple MacOS
Tips & Tricks: Single Sign-on (SSO) for GlobalProtect
How to manually stop and start PanGPS (service) or GlobalProtect (i.e. PanGPA) on macOS?
How to Export Logs from GlobalProtect App on iOS or Android
Does GlobalProtect client for Windows Need WMI Service Enabled?
Can a Ticket Number Be Used as an Option to Disable the GlobalProtect App for Linux?
GlobalProtect Client Installation Fails Because mfc120.dll Was Not Found
How to add Multiple portals to Globalprotect client via windows registry
macOS X 10.13 & iOS 11 - New Requirements for GlobalProtect Connections
GlobalProtect Client Unable to Connect on Newly Installed Machine
GlobalProtect Agent Fails to Install Properly Following an Upgrade
GlobalProtect Agent error Cannot connect to service, error: 10022
Connect Linux Machine to GlobalProtect
GlobalProtect Client Installation Error Due to Corrupt Cabinet File
How does the GlobalProtect Client get a New Configuration?
How to add multiple portals after a fresh GlobalProtect app installation on Windows?
Changing GlobalProtect Client Language
GlobalProtect Agent Prelogon Failing Even After Importing Private PKI Certificates
How to uninstall GlobalProtect without user intervention?
GlobalProtect Client on Mac Keeps Reconnecting
Articles related to HIP

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 4/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

How Does the HIP Mechanism Work in GlobalProtect?

How to Configure HIP for Missing Microsoft Patches
How to Configure GlobalProtect for Custom Registry Check on Windows
How to Troubleshoot HIP Match issues
What are the approved Antivirus vendors for GlobalProtect HIP objects?
GlobalProtect HIP check fails to detect Cybereason Anti-Malware on Linux
HIP check failures cause GlobalProtect tunnel to disconnect after 3 hours

HIP Match Based On Missing Patch ID for macOS Users

Articles related to Authentication
How to Configure AD authentication for GlobalProtect Users to Login With both "Domain\Username" and Just
"Username" Format
How to configure GlobalProtect for authentication using only certificates
GlobalProtect login fails when using a group in the allow list
How To Configure Global protect App 5.0 on Apple iOS 12 to use Client certificate for authentication.
Different SAML Profiles needed for Primary and Secondary devices in HA
How to resolved the Authentication failed because of "rad_access_reject"?
GlobalProtect Client Using RADIUS Two Factor Authentication (2FA) not Hitting the Security Rule
How to configure GlobalProtect with Certificate Only Authentication in PAN-OS 9.0?
GP users are not restricted to an AD group in allow list of authentication profile.
GlobalProtect App prompts user for user name and password on mobile device
Global Protect Authentication Timing Out Before Configured Radius Server Timeout
GlobalProtect client on iPhone or iPad unable to connect when using SAML authentication
SAML With GlobalProtect Application Doesn't Prompt For Selection Of Second Factor Authentication
USB devices disconnected after connecting to Global Protect
Active Directory Password Changes using GlobalProtect
How to generate cookies on GlobalProtect Portal and use cookies for Gateway Authentication
Why GlobalProtect authentication request is not sent to the next server listed in a radius server profile
How to configure Active Directory Authentication for GlobalProtect users to login with domain\username and just
username format
Single Sign-On (SSO) login prompt not seen during GlobalProtect client authentication while using SAML
authentication
Password Expiry Warning on the GlobalProtect Client
GlobalProtect LDAP Authentication Fails
GlobalProtect Users Unable to Authenticate when Using Kerberos
GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping
How SAML Authentication works with GlobalProtect SSO
Articles related to Split Tunneling
GlobalProtect: Split Domain & Applications and Exclude Video Traffic Features - Troubleshooting Tips
How to exclude Netflix from the Global Protect split tunnel
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 5/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

Can we use ping to test domain split tunneling in Globalprotect?

Log collection for macOS split-tunneling issues

Log collection for split-tunneling issues on Windows clients

Articles related to Clientless VPN

How to Troubleshoot Global Protect Clientless VPN
How to Gather Fiddler pcaps for Clientless VPN Application Based Issues
Enabling RDP access to Citrix environment through GlobalProtect Clientless VPN
Articles related to LSVPN
Why does the tunnel start bouncing when LSVPN is created with no access route on the Gateway?
How to view tunnel flow details for a 'GlobalProtect-site-to-site' LSVPN from the GlobalProtect Satellite
How to Configure GlobalProtect Satellite
GlobalProtect Satellite Not Receiving Newly Added Access Route from the Gateway
Articles related to GlobalProtect Configuration
How to configure GlobalProtect
Video Tutorial: How to Configure GlobalProtect on PAN Firewall
Basic GlobalProtect Configuration with Pre-logon
Basic GlobalProtect Configuration with User-logon
Basic GlobalProtect Configuration with On-Demand
How to Configure GlobalProtect Portal with Client Cert Authentication and Certificate Profile
How to Configure GlobalProtect SSO with Pre-Logon Access using Self-Signed Certificates
How to Configure Internal GlobalProtect Only
How to Configure DNS Proxy for GlobalProtect Clients
GlobalProtect: Implement Split Domain, Applications, Exclude Video Traffic Configuration
How to configure a GlobalProtect client to get the same IP address
GlobalProtect Clientless VPN SAML SSO with Okta
Exclude Domains From GlobalProtect Tunnel
How to Configure GlobalProtect using Pre-Logon in PAN-OS 9.0
How to Configure Global Protect Gateway on Loopback Interface with iPhone Access
How to configure a dual ISP network with GlobalProtect VPN using a virtual router and Policy-Based Forwarding
Access Route based Split Tunneling for VPNC Client on Linux Distributions
GlobalProtect: Optimizing Office 365 Traffic
Okta/Palo Alto Networks SAML Integration
Registry Setting when Deploying GlobalProtect Client with Microsoft Group Policy Object
BASIC-GLOBALPROTECT-CONFIGURATION-WITH-PRE-LOGON-THEN-ON-DEMAND

Articles related to GlobalProtect Certificates

How to generate a CSR (Certificate Signing Request) and import the signed certificate
How to generate a new self-signed SSL certificate

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 6/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

Certificate config for GlobalProtect - (SSL/TLS, Client cert profiles, client/machine cert)
Can we use the same certificate for Global Protect Gateway and Portal?
How to install a chained certificate signed by a public CA
How to configure certificates for multiple gateways managed by a single portal for GlobalProtect
Some Linux clients are not able to connect to GlobalProtect after May 30 2020 if GP certificate is signed by
Expired AddTrust CA
How to create subordinate CA certificates with Microsoft certificate server
How To Configure GlobalProtect VPN Using An External Root CA
How to import Global protect portal cert that is renewed by Godaddy
GlobalProtect Auth Fails When Client Cert Has Special Character in Subject (common-name)
How to Use a Wildcard SSL Cert with Subject Alternative Names for GlobalProtect Portal/Gateway
Controlling GlobalProtect VPN Access with OCSP
How to Issue Certificates to GlobalProtect Devices
Disabling weak ciphers for web GUI access is not working
Articles related to GlobalProtect Troubleshooting
Common Issues with GlobalProtect
GlobalProtect Client Fails to Connect Intermittently
What Steps Can be Taken to Increase GlobalProtect Performance Due to Increased Number of Connections?
Troubleshooting GlobalProtect
Useful GlobalProtect CLI commands
How to troubleshoot when Global protect gateway tunnel get disconnected due to" keep-alive timeout"
How to detect when Global Protect client fails to establish IPSec VPN tunnel with the GP Gateway
GlobalProtect Agent (App) Directory Structure on Microsoft Windows
GlobalProtect agent fails to connect and shows "Invalid portal" after the user logs in to an endpoint.
Where is the GlobalProtect Log File Located?
Why is GlobalProtect Slower on SSL VPN Compared to IPsec VPN?
GlobalProtect Client Issues with Multiple ISPs
GlobalProtect Client Stuck at Connecting when Workstation is on the Local Network
How to Find GlobalProtect Agent Installation Issues on Windows
GlobalProtect app on Android 6.0+ cannot establish VPN connection using IP address
Using the GlobalProtect Client After Disabling a Proxy Server
How to Open a Case on GlobalProtect Remote User VPN Connection Issues
Troubleshooting GlobalProtect MTU Issues
All Other Articles related to GlobalProtect
Is There a Limit to Maximum Number of Gateways for GlobalProtect?
How to Activate Trial Licenses
Which IP is Used for User-IP Mapping when Internal GlobalProtect is Configured and Multiple NIC Cards are
Enabled?
Connection to GlobalProtect is failing with error "You are not authorized to connect to GlobalProtect Portal"

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 7/8
2/28/23, 6:22 PM https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS

Connection to GlobalProtect is Failing with Error "Matching client config not found"
LIVEcommunity Discussions of the Week (DOTW)
DOTW: Aged out Session End in Allowed Traffic Logs
DOTW: TCP Resets from Client and Server aka TCP-RST-FROM-CLIENT
DOTW: Palo Alto Networks Compatibility Matrix
DOTW: GlobalProtect and Static IP
DOTW: Multiple GlobalProtect Portals and Gateways
DOTW: MFA and 2FA for GlobalProtect and Next-Generation Firewall
DOTW: GlobalProtect Troubleshooting Tips
DOTW: GlobalProtect and Upgrade to MacOS Catalina Issue

Additional Information
For more content on GlobalProtect, please explore the following resources:
TechDocs - GlobalProtect Landing page
LIVEcommunity - General Topics Discussion board
Beacon - GlobalProtect guided learning path
Learning Center - Educational training courses
Global Protect Admin Guide: Admin Guide

Attachments

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfXCAS 8/8