Palo Alto GlobalProtect - Must-Know Portal Settings & Tips [2024]

[@tremelai]

I have been working with PA firewalls since 2009. I find your videos very helpful for my team to get proficient with our current PA environment. I see that you share the same the joy I feel when working with technology! Thank you for your work!

[@netsums]

Thank you for your comment! I'm glad to hear your team is being able to learn something with the videos! 😊

[@gabintalla1096]

Amazing video, really helpful...Thanks again

[@netsums]

Thank you for the comment, I'm glad the video could be useful. :-)

[@debmalyabasu479]

Nice tutorial, need Playlist for panorama Sir.

[@netsums]

Thank you. Here the link: kzbin.info/aero/PLzZhtxtP3S77U0ituiyfc17uFP_qB5mDV&si=gGmfeVlJyTI7kJp2

[@르브론시몬스]

Please also make a video of the Palo Alto EDL (External dynamic List) feature. I am curious about how to connect to the EDL server in https mode instead of http.

[@netsums]

Good suggestion, I'll keep that in mind for upcoming videos. Thank you.

[@onurcan9129]

Thanks for sharing another next great content, can you please demystify the packet capture via cli to analyze the traffic ? There is no plain instructions on internet about it.

[@netsums]

Sorry for the late reply. I found this, is it what you're looking for? indepthtechno.wordpress.com/2018/12/09/enable-packet-captures-on-palo-alto/

[@tundetade6472]

Hello, I have this error of virtual adapter not set up correctly due to a delay. It's frustrating. help

[@Josellv_]

Amazing

[@netsums]

Thank you, I'm glad you liked it. :-)

[@ispolin1313]

Can we configure prelogin while using EnrtaID SSO for authentication to Global protect? How it will work? First it will use machine cert, to connect VPN, and the relogin with EntraID user creds?

[@netsums]

Yes, just like that. I have that implemented to a customer, it works fine.

[@ispolin1313]

@@netsums Can you please share with me more details? Have you used EntraID certificate based authentication for this? If yes, what kind of CA you used and should machines be hybrid joined? Should cert be issued for each machine?

[@trenuci]

Allow Transparently wont upgrade your global protect app if there is more then one version in between. Like 6.3.0 to 6.3.1. It will notify you about upgrade procedure, but never start upgrading.