Your Palo Alto firewall coaching is the best even in 2024. Please make an additional video on how you set up your environment in approaching this tutorial. Thanks.
Excellent video. Obviously, the assumption here is that anyone watching this has already set up their network correctly; because this focuses strictly on configuring GlobalProtect, but great format bulleting out what will be done when. I already had some experience with PAN devices; but this helped "refresh my memory" around GlobalProtect, because I gave up trying to fix it last year. I have been running a PA-220 for 3+ years and never bothered to get GlobalProtect working until this past weekend and now I have it running with my Android phone and will be extending it to my family. Excellent VPN solution and I prefer the "fat" client. 💪
I tried on my Palo Alto 9.0. only difference is i am using local database. Everything works till the last mile. "The server certificate is invalid. Please contact your IT administrator." I followed the steps on your certificate too. :-(
I have the same problem "The certificate CN name mismatch". I didn't set up any zones, everything on ethernet1/1 - is that the problem? Easy to follow video on everything else.
I have a question. Supposing I use GlobalProtect and I work remotely, but I must work inside the state of New York. But I'm staying in Texas. Will they be able to track my Texas IP despite being connected with GlobalProtect?
Hi Ed, I would like to implement QoS on my Paloalto firewall. The targets are, 1) For VIP group: assign a guaranteed bandwidth (egress guaranteed) of 20Mbps, 2) For voip and video: guarantee QoS to both incoming and outgoing network traffic, we will enable QoS on both the firewall’s internal- and external-facing interfaces 3) Limited download and upload: Egress Max value for all download and upload What's the best practice for QoS? Thanks.
I’m trying to find the previous video in which you configured AD Authentication on the Palo Alto, Can you point me to it? I have been unable to find it.
hello there... What do you do if a home based worker's active directory password expires and the globalprotect client is not prompting to enter a new password (logoff/logoin/restart/refresh connection = no fix) ? how do you get them connected again, after the helpdesk resets their AD password. thx.
I also agree that your walkthrough is the best but if you could dump this background music, it would be much better. Not saying this to be mean, not sure if it is just me but while trying to learn something technical, it becomes quite annoying. Keep up the good work...
![Palo Alto GlobalProtect with Pre-Logon [2024]](/img/n.gif)
Your Palo Alto firewall coaching is the best even in 2024. Please make an additional video on how you set up your environment in approaching this tutorial. Thanks.
Tried many different "walk-throughs" to configure VPN on my first PaloAlto appliance. Yours is BY FAR the best and most thorough to follow. Thank you!
Excellent video. Obviously, the assumption here is that anyone watching this has already set up their network correctly; because this focuses strictly on configuring GlobalProtect, but great format bulleting out what will be done when. I already had some experience with PAN devices; but this helped "refresh my memory" around GlobalProtect, because I gave up trying to fix it last year. I have been running a PA-220 for 3+ years and never bothered to get GlobalProtect working until this past weekend and now I have it running with my Android phone and will be extending it to my family. Excellent VPN solution and I prefer the "fat" client.
💪
Thanks for a excellent, concise, working how-to. Your is the only one that worked out of the many we tried.
Thanks for the excellent explanation
Thanks! very informative. It worked like a charm
I tried on my Palo Alto 9.0. only difference is i am using local database. Everything works till the last mile.
"The server certificate is invalid. Please contact your IT administrator."
I followed the steps on your certificate too. :-(
I have the same problem "The certificate CN name mismatch". I didn't set up any zones, everything on ethernet1/1 - is that the problem? Easy to follow video on everything else.
How did you configure external IP for the Palo Alto (.72 address)? Or is this just the MGMT IP?
Thanks, it was very informative and easy to understand
ED where are your courses bud? I couldnt find them on linkedin url posted by you. How do I take your training?
I have a question. Supposing I use GlobalProtect and I work remotely, but I must work inside the state of New York. But I'm staying in Texas. Will they be able to track my Texas IP despite being connected with GlobalProtect?
Did we need to configure any on Policy Rule or not bro?
Hi Ed,
I would like to implement QoS on my Paloalto firewall. The targets are,
1) For VIP group: assign a guaranteed bandwidth (egress guaranteed) of 20Mbps,
2) For voip and video: guarantee QoS to both incoming and outgoing network traffic, we will enable
QoS on both the firewall’s internal- and external-facing interfaces
3) Limited download and upload: Egress Max value for all download and upload
What's the best practice for QoS?
Thanks.
Informative and funny too...
Why do we need to configure Internal Gateways (configure ping)?
I’m trying to find the previous video in which you configured AD Authentication on the Palo Alto, Can you point me to it? I have been unable to find it.
That is part of my "Palo Alto User-ID" video. Check it out at czcams.com/video/Fm87p5rPGqg/video.html
hello there... What do you do if a home based worker's active directory password expires and the globalprotect client is not prompting to enter a new password (logoff/logoin/restart/refresh connection = no fix) ? how do you get them connected again, after the helpdesk resets their AD password. thx.
Hi, could you please tell me how I can give different IPs to the vpn users depending on the AD group?
HI i would like to know how to implement 2FA in global protect VPN for end user
really helpfull
I also agree that your walkthrough is the best but if you could dump this background music, it would be much better. Not saying this to be mean, not sure if it is just me but while trying to learn something technical, it becomes quite annoying. Keep up the good work...