Your Palo Alto firewall coaching is the best even in 2024. Please make an additional video on how you set up your environment in approaching this tutorial. Thanks.
Excellent video. Obviously, the assumption here is that anyone watching this has already set up their network correctly; because this focuses strictly on configuring GlobalProtect, but great format bulleting out what will be done when. I already had some experience with PAN devices; but this helped "refresh my memory" around GlobalProtect, because I gave up trying to fix it last year. I have been running a PA-220 for 3+ years and never bothered to get GlobalProtect working until this past weekend and now I have it running with my Android phone and will be extending it to my family. Excellent VPN solution and I prefer the "fat" client. 💪
I have a question. Supposing I use GlobalProtect and I work remotely, but I must work inside the state of New York. But I'm staying in Texas. Will they be able to track my Texas IP despite being connected with GlobalProtect?
I tried on my Palo Alto 9.0. only difference is i am using local database. Everything works till the last mile. "The server certificate is invalid. Please contact your IT administrator." I followed the steps on your certificate too. :-(
I have the same problem "The certificate CN name mismatch". I didn't set up any zones, everything on ethernet1/1 - is that the problem? Easy to follow video on everything else.
Hi Ed, I would like to implement QoS on my Paloalto firewall. The targets are, 1) For VIP group: assign a guaranteed bandwidth (egress guaranteed) of 20Mbps, 2) For voip and video: guarantee QoS to both incoming and outgoing network traffic, we will enable QoS on both the firewall’s internal- and external-facing interfaces 3) Limited download and upload: Egress Max value for all download and upload What's the best practice for QoS? Thanks.
hello there... What do you do if a home based worker's active directory password expires and the globalprotect client is not prompting to enter a new password (logoff/logoin/restart/refresh connection = no fix) ? how do you get them connected again, after the helpdesk resets their AD password. thx.
I’m trying to find the previous video in which you configured AD Authentication on the Palo Alto, Can you point me to it? I have been unable to find it.
I also agree that your walkthrough is the best but if you could dump this background music, it would be much better. Not saying this to be mean, not sure if it is just me but while trying to learn something technical, it becomes quite annoying. Keep up the good work...
![Palo Alto GlobalProtect VPN Configuration [2024 IMPROVED!!!]](/img/n.gif)
Your Palo Alto firewall coaching is the best even in 2024. Please make an additional video on how you set up your environment in approaching this tutorial. Thanks.
Excellent video. Obviously, the assumption here is that anyone watching this has already set up their network correctly; because this focuses strictly on configuring GlobalProtect, but great format bulleting out what will be done when. I already had some experience with PAN devices; but this helped "refresh my memory" around GlobalProtect, because I gave up trying to fix it last year. I have been running a PA-220 for 3+ years and never bothered to get GlobalProtect working until this past weekend and now I have it running with my Android phone and will be extending it to my family. Excellent VPN solution and I prefer the "fat" client.
💪
Tried many different "walk-throughs" to configure VPN on my first PaloAlto appliance. Yours is BY FAR the best and most thorough to follow. Thank you!
Thanks for a excellent, concise, working how-to. Your is the only one that worked out of the many we tried.
Thanks for the excellent explanation
I have a question. Supposing I use GlobalProtect and I work remotely, but I must work inside the state of New York. But I'm staying in Texas. Will they be able to track my Texas IP despite being connected with GlobalProtect?
I tried on my Palo Alto 9.0. only difference is i am using local database. Everything works till the last mile.
"The server certificate is invalid. Please contact your IT administrator."
I followed the steps on your certificate too. :-(
I have the same problem "The certificate CN name mismatch". I didn't set up any zones, everything on ethernet1/1 - is that the problem? Easy to follow video on everything else.
Thanks! very informative. It worked like a charm
How did you configure external IP for the Palo Alto (.72 address)? Or is this just the MGMT IP?
Hi Ed,
I would like to implement QoS on my Paloalto firewall. The targets are,
1) For VIP group: assign a guaranteed bandwidth (egress guaranteed) of 20Mbps,
2) For voip and video: guarantee QoS to both incoming and outgoing network traffic, we will enable
QoS on both the firewall’s internal- and external-facing interfaces
3) Limited download and upload: Egress Max value for all download and upload
What's the best practice for QoS?
Thanks.
ED where are your courses bud? I couldnt find them on linkedin url posted by you. How do I take your training?
HI i would like to know how to implement 2FA in global protect VPN for end user
Thanks, it was very informative and easy to understand
Why do we need to configure Internal Gateways (configure ping)?
Did we need to configure any on Policy Rule or not bro?
hello there... What do you do if a home based worker's active directory password expires and the globalprotect client is not prompting to enter a new password (logoff/logoin/restart/refresh connection = no fix) ? how do you get them connected again, after the helpdesk resets their AD password. thx.
Hi, could you please tell me how I can give different IPs to the vpn users depending on the AD group?
I’m trying to find the previous video in which you configured AD Authentication on the Palo Alto, Can you point me to it? I have been unable to find it.
That is part of my "Palo Alto User-ID" video. Check it out at ua-cam.com/video/Fm87p5rPGqg/v-deo.html
Informative and funny too...
really helpfull
I also agree that your walkthrough is the best but if you could dump this background music, it would be much better. Not saying this to be mean, not sure if it is just me but while trying to learn something technical, it becomes quite annoying. Keep up the good work...