GlobalProtect (Palo Alto)

Palo Alto GlobalProtect is an always-on SSL/IPsec VPN solution with MFA authentication included on PAN-OS firewall devices.

• Platforms: iOS, Android, Windows and macOS

• GlobalProtect Application Command Center (ACC)
• Prisma Access (formerly GlobalProtect cloud service)
• GlobalProtect Agent

Versions

• 9.1
  • GlobalProtect Activity charts and graphs on the ACC
  • Log Forwarding of GlobalProtect logs
• 9.0

See also: PAN-OS Releases

Features

• multi-factor authentication (MFA) methods, including one-time password tokens, certificates, and smart cards, through RADIUS and SAML integration
• Traffic Inspection
  • Identifies application traffic, regardless of port number
  • SSL Decryption
• URL filtering with PAN-DB

Related commands

• show global-protect-gateway current-user
• show global-protect-gateway flow

Activities

• Read GlobalProtect Administration Guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/globalprotect/9-1/globalprotect-admin/globalprotect-admin.pdf

Related terms

• HIP. If the Host Information Profile (HIP) feature is enabled, the gateway generates a HIP report from the raw host data that the endpoints submit, which it can use for policy enforcement.
• Prisma Cloud

See also

• VPN: IPsec (Openswan), OpenVPN, Forticlient, GlobalProtect (PAN-OS), WireGuard (Linux Kernel), Tailscale, PulseSecure, WebVPN, SoftEther, ESP, IKE, AWS VPN, Zerotier, VPN client, Pritunl, GCP Cloud VPN
• PAN-OS (Palo Alto): PAN-OS Releases, show vpn, GlobalProtect, GlobalProtect logs, WildFire, show log, show session all, MDM, match, PAN-OS reports, HIP, Zone
• DMZ, Port knocking, Bastion host, Firewall Software: iptables ufw firewalld nftables firewall-cmd ipfw (FreeBSD) PF (OpenBSD), netsh advfirewall, PAN-OS, WAF, pfsense, VyOS, Cisco ASA, DMZ, F5, URL Filtering, port forwarding, macOS application firewall, Windows firewall, Fortigate, ngrok, Network ACL

https://weberblog.net/cli-commands-for-troubleshooting-palo-alto-firewalls/